{"report_id":"2272d3fd-6c67-4714-92c3-005a11be7d0f","version":6,"status":"done","tags":[],"date":"2026-05-27T01:35:29Z","url":{"schema":"https","addr":"virgogoldonline.com/","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":0,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"virgogoldonline.com/","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"title":"Dutch Financial Bank – We Provide The Best Online Banking Services","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T12:40:46.817109Z","times_seen":17855281,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"virgogoldonline.com/","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":0,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T01:35:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":6,"received_data":217690,"sent_data":3342,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":18266,"sent_data":578,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-05-25T08:04:06.488178Z","alert_count":0,"request_count":1,"received_data":1013,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"node-ya-2.jivosite.com","ip":{"addr":"5.252.32.145","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Slovakia","country_code":"SK"},"domain_registered":"2011-05-06","domain_rank":869812,"first_seen":"2023-01-17T17:11:06Z","last_seen":"2026-05-23T10:09:32.383132Z","alert_count":0,"request_count":1,"received_data":708,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"virgogoldonline.com","ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"domain_registered":"2025-07-23","domain_rank":0,"first_seen":"2026-03-18T17:02:11.289386Z","last_seen":"2026-05-26T18:41:50.889061Z","alert_count":333,"request_count":111,"received_data":5244121,"sent_data":54290,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Contact Form 7:6.1","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Elementor:3.30.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Redux Framework:4.5.7","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW:2.1.2","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2026-05-21T22:07:40.305514Z","alert_count":0,"request_count":8,"received_data":1738799,"sent_data":3824,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/metform/public/assets/lib/cute-alert/cute-alert.js?ver=4.0.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"687012715b5ae1b4aee2822874235bcb","sha1":"0b7ae672c447fd031fa9ecfb3122ea7fb3a5095a","sha256":"cf8070f5f0274ec5dc179e202cc128e168d688ad1878965fb6ee346c18533c68","sha512":"c02ddcce3f00975438d2609de012bf62bce068c599839f58c34b5548704499143c05dfa3646d385e41a9f41e2c4ee0b6df0045adf5152ce6e34724c67579f802","ssdeep":"","tlshash":"bf7165b281c28e3b1af246cb519897dd7ee0a006fc8b1c9774ac4edc17dbd428de2152","size":3516,"data":"","first_seen":"2024-03-08T09:57:40Z","last_seen":"2026-08-10T06:06:43.528404Z","times_seen":6300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/jquery.nice-select.min.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-12T10:40:31.655745Z","times_seen":10605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6333e839352933a58f909755477b9aaf","sha1":"3c2f7e8f9bfc19686f6c315e367cf7fdb482c78d","sha256":"1e91b6fe4d480e22497b684271105eea7eb2b93152797e15926061b2c84563fa","sha512":"ae36a5f816ac92466c2a63bd65576b7434bba909fa91f14520b88ef4af788399e75999d1868dd8500faef194ee6cc84498f636a8e81df7a5e08c639bf32514a3","ssdeep":"96:ka07wsAKuuGLriLDzLiGLroLDzLOG1raLDzL4GPrKLDzL8GfryLDc5PLAGdraLl9:d0oyGLOXiGLkXOG1WX4GP+X8Gfmk5zAd","tlshash":"ab919cc0fe7d4296a966379365ad60d9299c1439c89320f3f1fa26244a9cb1f217e91c","size":4458,"data":"","first_seen":"2025-04-01T13:06:23.867241Z","last_seen":"2026-05-27T01:35:41.512662Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/elementor-pro-frontend-js-before","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"98e7c73f77a1cd735fe3a1acb0367ff7","sha1":"86fb2f32312584b2e45196ce1be35335cab048e5","sha256":"f982d23dbc9da484e3580a7009a991d380b516e3b65d25ac8d32b72750a7a33f","sha512":"ad8f25b816a6b4ec04ca1dc6e122b98692fedccf10ba10ae797d3ad98707f6f3edb02e6f265251211a1a27239c4a9dcdeb54011d9178bc755748482ae3a176c2","ssdeep":"","tlshash":"9c517856ef210e2487aea6f831ca3a6f48c04233dac0f44d12cae06101f3d9df1492a3","size":2631,"data":"","first_seen":"2026-05-27T01:35:41.603744Z","last_seen":"2026-05-27T01:35:41.603744Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.20.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01e91317c562dac480c359af16112ebb","sha1":"8bf66ac50e35e809f98ee3a644f47b026ca73645","sha256":"1d9a012bd94a87b7551f2457174092fe60669b612aaa0b967a95a9488a744f83","sha512":"c821106b74056748c199fbea80bbb2450791f18b8959e5b0f84fc86153ed3667f18972ae9171047277072d33d5f44130ff38576f180435cc17508f2fcca957b2","ssdeep":"768:pTLX+EVxFm6cKibdndptaQ9HuGJswyC/pkTAQYtDT6HJiwknOsN7KOljuOzQYqER:9tVxFm61ib94Q9HuGHiiwkOsN7KOljuy","tlshash":"7cb2d9063153a87a50cfc15be067420e7b3748857405b0ed7abc6ceba5b8d9a33ea335","size":25066,"data":"","first_seen":"2024-03-12T09:44:34Z","last_seen":"2026-08-11T14:37:58.691143Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.30dc2f9c080845a413a6.bundle.min.js","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8516e1abe34afada26c662bab66f61b6","sha1":"5743609cc75f4826f61b3637056fff91ee41b147","sha256":"7c7064750c149fcc96e0a855b2be5e80b89cee5eafcda135fbe035ec0c1bc1e2","sha512":"34e94ced05b0c6b760739ce13288c31c4d4f743c627aeb17acfc8909683e557c6674dbb2fe04527fc6018e92283eed9e50db5cf86b0f677fd7f00f8f59d955cd","ssdeep":"192:AwfFpzqxODoWV5KxZmdXLf+UvDZ5CMtakRhPZTxcMkCwB410QsFfpRHvcwxDnPoj:zHzqxORV5KxodXLfpvD/NtakRhPZTxcg","tlshash":"c402210a74c1942db58b58ba3532432c66a8014de1018f6db1bf79fb85a6d82377b7f1","size":8541,"data":"","first_seen":"2025-07-22T15:49:24.313045Z","last_seen":"2026-08-12T07:51:56.380045Z","times_seen":3213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-12T11:52:10.545959Z","times_seen":310945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/jquery.lettering.min.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"83f6723631eeb52da3101b72b7624728","sha1":"3c74ddfb1209f2fd56fd58e61829e01a073e303f","sha256":"c9bd115d1d0d0871a3e6b701384a903d7bd378313a0504ae94949f5bb21894f0","sha512":"549fe261b8aed5e27ac8b8a67d38bae6dd91f5315c1b90fd5fc6427db6c41614df3e728987c6f2a0a5c46b08b949c2590582f57a28ab2f5f8c733643c744f3f5","ssdeep":"","tlshash":"4311dcc4f3a3aa07479bb7bd513b620ee26654c354030c01f9a8d2563da7b490aa7ea4","size":924,"data":"","first_seen":"2023-03-07T14:30:16Z","last_seen":"2026-08-12T10:40:31.71389Z","times_seen":1001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/funfact-counter.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a35dba01333828b46665aabc294ec744","sha1":"58908335b1b572107f94c2877a945b55890172e1","sha256":"00622cbb9b83ee156267bf55683200dedc15e4a28aa23d565455f80d7a3faab4","sha512":"86268a17ad37d8790cf25a45adb1b334badd218f79c1d335247550f0f2aded38f240f32c667ba8c8a90da07260163e42ad3216f4b020e36877019410ca1d366a","ssdeep":"","tlshash":"2951f1e0ff6d91e561bb3133645e22db649c5071c48360a3fdea81248afcb593939509","size":2860,"data":"","first_seen":"2025-04-01T13:06:23.864519Z","last_seen":"2026-05-27T01:35:41.535485Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6333e839352933a58f909755477b9aaf","sha1":"3c2f7e8f9bfc19686f6c315e367cf7fdb482c78d","sha256":"1e91b6fe4d480e22497b684271105eea7eb2b93152797e15926061b2c84563fa","sha512":"ae36a5f816ac92466c2a63bd65576b7434bba909fa91f14520b88ef4af788399e75999d1868dd8500faef194ee6cc84498f636a8e81df7a5e08c639bf32514a3","ssdeep":"96:ka07wsAKuuGLriLDzLiGLroLDzLOG1raLDzL4GPrKLDzL8GfryLDc5PLAGdraLl9:d0oyGLOXiGLkXOG1WX4GP+X8Gfmk5zAd","tlshash":"ab919cc0fe7d4296a966379365ad60d9299c1439c89320f3f1fa26244a9cb1f217e91c","size":4458,"data":"","first_seen":"2025-04-01T13:06:23.867241Z","last_seen":"2026-05-27T01:35:41.512662Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/da8269d/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"03b76bd3b0e04c97b6ef056034130734","sha1":"ad1a96fcc81ce36b53f62335a3013bd0618d5587","sha256":"0f311a27d9df6158364f9d7bf0a13f8aa5161fc0b64ffd2946472957288a09b1","sha512":"61553be349ec52ab3dc14091311d0b7916f500a8aa92b0be7f8772a9f25f1e41a1f2f658596b958ad4ea0114f9119555f5af55a1841eb780bec403cc45a97875","ssdeep":"192:xbhNmk/7Obf14M63OOIpUTPqZ8BijFLeEJK:xNNH7ObdF/OIphZ8wjFCmK","tlshash":"3622e71ee7017f360faa13c3748f7752b6a480e992646cb5d89c826943b9bc972177cc","size":10577,"data":"","first_seen":"2026-05-14T14:28:59.262546Z","last_seen":"2026-08-09T11:59:13.090537Z","times_seen":472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-12T12:39:33.573774Z","times_seen":930103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/script.js?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8423d9aabbcc361fd9cb67125a67d8f","sha1":"013d060cf0c23b15e8261d7d0150df2bd69b251f","sha256":"82e9ffe8c8d4fbb482ae53d6b62146fbdcee80d3e6f07fe2f3d9fbcd9fd9100a","sha512":"f10c970490f8b4899330ec3319d421328b3a3aaf97557f418d2f55158971b762037c5438cb297de2b526a9c5064a7edc71339b475d794f84803dab32f11f6103","ssdeep":"192:rx92EFcaGyBbsP5zrUgySQl5iiP2GlNJrDTaPU:rUyFGxrUEQXiieGlNxaPU","tlshash":"ad123e94f3bc66a2107f3129941e66c5373d50b3c6824c7bfcba44682fd53a876a1d1e","size":9573,"data":"","first_seen":"2025-04-01T13:06:23.872229Z","last_seen":"2026-05-27T01:35:41.55902Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/jquery.circleType.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c222981b8b0287f780028d52aeb49325","sha1":"f9ba9352703f435dafe7df2e596a45922d50ef54","sha256":"a69584d2eb48fe1595901289d5a2724c873515f857135e7890c56b9cf427f6a7","sha512":"c3cc6a266d680b8087113a2d21a10195f4783bbd8c5a304725dd6811889f11217e38fbe6eb6047947947dac640843ac5d126957309f533130d4423cc54f791cf","ssdeep":"96:oUrcUMyQMvzjDmSMqps+i5UIKzg/g7VUykACOzjRsIcxBy+nBOZ2W:1rXhQMvLTpst5Uz847G4CojcxIGW","tlshash":"baa1c0685e9a30251027b57ecbdf66447236921b001ad812be6c12d62fd1aac1be5ffc","size":4995,"data":"","first_seen":"2023-11-29T08:44:26Z","last_seen":"2026-06-04T04:46:08.572677Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6333e839352933a58f909755477b9aaf","sha1":"3c2f7e8f9bfc19686f6c315e367cf7fdb482c78d","sha256":"1e91b6fe4d480e22497b684271105eea7eb2b93152797e15926061b2c84563fa","sha512":"ae36a5f816ac92466c2a63bd65576b7434bba909fa91f14520b88ef4af788399e75999d1868dd8500faef194ee6cc84498f636a8e81df7a5e08c639bf32514a3","ssdeep":"96:ka07wsAKuuGLriLDzLiGLroLDzLOG1raLDzL4GPrKLDzL8GfryLDc5PLAGdraLl9:d0oyGLOXiGLkXOG1WX4GP+X8Gfmk5zAd","tlshash":"ab919cc0fe7d4296a966379365ad60d9299c1439c89320f3f1fa26244a9cb1f217e91c","size":4458,"data":"","first_seen":"2025-04-01T13:06:23.867241Z","last_seen":"2026-05-27T01:35:41.512662Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.30.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1729e5f3ed23b6781e4b88a336ebff3a","sha1":"c1e8e0e91d28183b9c3ac67baac6c38f514d106b","sha256":"67e390e3ccd4903c7fce52d3031de0c7ac78431819fa7d47adfefefeafdfa5a2","sha512":"a99cafbc4a805388da309f949770a7026f45500a6bb4e9d4e1cf7250b6abace47a720d6d8e13839cc5359c69ecac4913c089b7823b30c66934fe6bedfb161cb6","ssdeep":"768:nRdRMtJR8RjDKv//DQl5ZnfVgbpM+MpKEAzBc5GlTSeUsveOBNU5aG9g3fWLJhoh:nRdCtJR8RjD8/0fVliEAzBc5UTSeUsGa","tlshash":"08e209527296d4a2069f48a3f0331119f3765dd9b80af0d8b2acdce1a475f877361b35","size":32876,"data":"","first_seen":"2025-07-22T15:49:24.306423Z","last_seen":"2026-08-12T07:51:56.392413Z","times_seen":3093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/owl.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccdf893e7d8b26933af0c336bcc3943e","sha1":"ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0","sha256":"db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466","sha512":"818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv","tlshash":"bf9393c5f36c261b422631785eae23ce723d402ad911186f7ca8e9dc29d546c436eff9","size":89992,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T10:48:36.428103Z","times_seen":12764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.20.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"32956574f807093aae94a21551640c54","sha1":"0bace9c120d16ab4ee70af5ba3b0e1cd6546732f","sha256":"194eceb3a9e55812f3883818c48dd0d9610de17531e94d0b82841fd32b9728c3","sha512":"a0c2b61162354084e8eea34ecf887662b661ef170d31ca602e700988c5ce80c0cb521d59eb33734016525a0ff6c26cc6444231a03577dc0ae04c0916e7a8cf71","ssdeep":"96:BI/2ifnhUwdL5MIGA6iZ20DTl7CKEpre1+Xz2x4Af094Mxbl26GVleVlAlvkbzgF:2/2ifhU6L5MXiZzTgvrxqCO094Mx/GaW","tlshash":"1ec164d91a549e6b26e03ad8b0975b701e3dd0233c29ea81e951eddc19f8fd083d9933","size":5825,"data":"","first_seen":"2024-03-12T09:44:33Z","last_seen":"2026-08-11T14:37:58.617756Z","times_seen":625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.20.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a97ab2813f23b4e22d9dba80e592a60e","sha1":"d238f10757b1a28ee1eb989ae66ef21a01b884fe","sha256":"203c077c3b8457d69187e3af113c7c82e4a0f9df885738e688e0fcc4e9641a1c","sha512":"56f12908863a935bbe709c94f1d17063233b21010b077f59a3ea238e78f5d35a33bd31049a3bdcdd440e3ac16d1236a96dfbfc5c09ff52233b86795e3a849e1d","ssdeep":"3072:ow/wpH8dwtu8jbxwyvrlC7ao7iZ09sluH7://yH8dwtu8jbxwlR7iZ0R7","tlshash":"15240b92305298b646cf40afb417020df72219adb406b4aeb9fc8cdb55b1ec63376776","size":221379,"data":"","first_seen":"2024-05-19T00:36:29Z","last_seen":"2026-08-11T14:37:58.632056Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.0.4","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f548c3ee194fef79fbe994427b112a","sha1":"be599c3fb242911ddabc433b16ad485d4dbbb251","sha256":"2fae8ea6e8f7a8d435895a186042216e7f845d89003d9eb5054a3be9088717e1","sha512":"790e762d49827e019ac373ae707219f5748d07b9dc0e86897c1e226547c7b7c718dc10531b3c39d6f97dc92b38b9001a28b154452f60e606306d5ed12057932f","ssdeep":"","tlshash":"3b11c881fdec4e6912e120e0ca2ba4047449b821b444cd1d4a3460eaafd0bdaacd0b5b","size":880,"data":"","first_seen":"2025-07-22T15:21:11.533016Z","last_seen":"2026-08-08T06:01:39.416364Z","times_seen":796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-08-12T12:39:33.52481Z","times_seen":234052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/3MONJtp1c6?ver=1.3.6.1","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c16a93671478a04e67ef6ce8fd8d49","sha1":"01b684e9d048b15a6db62c1089268153294c59e2","sha256":"e9e14e0a77b0bd6574ede9cad8679750cba46508846b46c6da140df5def3e9a2","sha512":"5bddfe37cf1714a45c8be3be1d26c0dfba9b05c59a438fd87322e2cfdeb34f6585c3b86c5ad28adb1e4e75bf812f10792a74a11cbe61e914e6e53a8bc5f1ce6d","ssdeep":"384:boUeJkQCuw6SmbXm0wrA8zuyEQ+EbzXDpGiqJISO9JHW8r08wI+xcXd4:vFj6x0A8z5EQ+EPXDe6/rp+xcXd4","tlshash":"51822a6e7959b93383b108f5a16f620a773549ebd404cc20a405f9897d78ade813fee8","size":18437,"data":"","first_seen":"2026-05-18T13:47:45.536253Z","last_seen":"2026-06-04T16:04:43.518197Z","times_seen":717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/funfact-counter.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a35dba01333828b46665aabc294ec744","sha1":"58908335b1b572107f94c2877a945b55890172e1","sha256":"00622cbb9b83ee156267bf55683200dedc15e4a28aa23d565455f80d7a3faab4","sha512":"86268a17ad37d8790cf25a45adb1b334badd218f79c1d335247550f0f2aded38f240f32c667ba8c8a90da07260163e42ad3216f4b020e36877019410ca1d366a","ssdeep":"","tlshash":"2951f1e0ff6d91e561bb3133645e22db649c5071c48360a3fdea81248afcb593939509","size":2860,"data":"","first_seen":"2025-04-01T13:06:23.864519Z","last_seen":"2026-05-27T01:35:41.535485Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1779371255","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"07425c89db0ceec1c8bc484aff17ae6d","sha1":"d71f78d02d2c2ffb0b751d31c94c3bb080df3f36","sha256":"849296e986a812b53e41039867f9ac6b85103f7b6e21de6c5eeffd447daf509a","sha512":"a3762e8f9e5a43fbd289f336ebc3d4821e4bd62265622bc7f4f5943b3e12f32b68fd8c915ac39b91e23260112e65abe0da41cb2e85f9b83f2a77dc4dbc1dfd05","ssdeep":"24576:DcnR2K48WX9n4Aw/LuQhLMcgBVMmM5SsC/Td+SmgPgYlFqnH7XhHX6mW1kWUb:DcnR2h8WX9n4AwucgBVMmaSsC/T4SVlC","tlshash":"77755bc5b2c5f46103d355e6a03b2005b33a2859340da068bbbcdcdbe95a98e6377f79","size":1551945,"data":"","first_seen":"2026-05-21T22:07:47.991167Z","last_seen":"2026-06-02T09:41:22.090838Z","times_seen":406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/contact-form-7-js-before","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8762ee35bc5623c40d7b37923d0a1652","sha1":"21a288015de26d73bd44fd880a1e43171d5a02ee","sha256":"81090db49d934e77eb9369c8e7e758fc107bf18a2293810cdc43dba86b980847","sha512":"84d99978d859c4d3ea9604d33142f65c5b550efda759e243d5005fc400a26ab32d1ca5293ba3ea0184bdc094602864434c6f3a4bb7275e991bde02d2c8b99d42","ssdeep":"","tlshash":"90311296daa8184514eac174017c1214b5149417ca1b9e45f24d004c6ff44796904185","size":1531,"data":"","first_seen":"2026-05-26T18:41:55.897925Z","last_seen":"2026-05-27T01:35:41.606021Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/appear.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a457d262e3c32d25c003ca412ee7fe6","sha1":"b08e23c986259073419a7068fcd36296a91b1ae4","sha256":"46fb2235bcf84086a9b939ae509ecacc01bb31c68ba94e6473e31d8adebec3eb","sha512":"826945d028efc7a9f95c22c5f4d34dfab6704b75f45e7d6fc2e93e2b42f7078aaf7b8508f9155b36dd15ca759a765fff3b4550f17e3b187e79285f63de455d53","ssdeep":"48:3l3Xwqhd24ayV+zFLAPftUIeohhR9zIreFfFoBSxMEh1u1cq6KjD4W7j9:V3XWz1zFkmDo7R9cr+YSpTocqBksj9","tlshash":"7391db4a759b2ab54877722a9f2fa20cd721513b1202c21138eede6c2f71c50a197fdc","size":4379,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-12T06:28:00.708299Z","times_seen":4212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/parallax-scroll.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"58d35988547129c9204295262c9f149a","sha1":"fbd7b2772d647f6bbcf98bc7d1909e5c27809df5","sha256":"a96a9d0e49111aa168bd7f45fa84ea4b5455f9274cae49d3b371f17d4f5444b4","sha512":"9a4b03e0cdba335bb3dfb0afd5e67a7d326a5513d2a463ea279493c5c1daf63eb87ae788d8c57f7474375182491d53eb88688fefd794f26cd468e418021979b6","ssdeep":"96:mTrhwew3hcUl2p3R0NIXCAVC7kCVCd4qv6NyHQsmT9CRmPvvobG1UG8qwkIuA5:QN/wxcUUBDVOkiVNyHg2mPX+x5","tlshash":"58120108e411052ae5f67335cf7d03aafb6a761b92519169bb0dc98d0fb083493a4ff6","size":9301,"data":"","first_seen":"2023-03-07T13:47:18Z","last_seen":"2026-08-10T01:45:19.784752Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/scrolltop.min.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7659661aad689dbdfda68967ba95d4aa","sha1":"8d1ac94fe3d2370f25beec76a6e523daa90341c8","sha256":"64144149c414bd3ad306e32b89e86b6adfdcafb71d8d43cd6bb6d025670578de","sha512":"017d820636a2177af04ae84196b758cfe8d10b5e2f141a66b6eafd96b30943c9eea8e2eb317325d19f16ebacfa92e38cf90945c33c5f2588fca6157c214f9e92","ssdeep":"","tlshash":"c501af146140d4f452fa507ad2b72ba17932a47f770711c4151a68b63406f3d5b93fe0","size":799,"data":"","first_seen":"2025-04-01T13:06:23.879576Z","last_seen":"2026-08-10T01:17:43.523784Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/jquery.fancybox.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e11711058a9459a94d5a19b26a78135","sha1":"76792d5913afe035b6ccbac585b0b5e70b33aa76","sha256":"7b99eee1db728472aaa8452017a0d755f488e8d647cc0f62baf45f8ff65b95ba","sha512":"6ecbe997bc6e82fa7976a98e291ec31e043de23f0f5d06834fcc809cde8d0c3ffa0e96c734dfc0b0fbc313e405eac603540913794bb3a9a86ac56db5d2ab868a","ssdeep":"1536:26iljQs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSp:2NoETcqwF3wO/VUbZZr7WP83RSD6E3t","tlshash":"f3e3968a67bd112589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","size":154104,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-12T10:36:17.542314Z","times_seen":3610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6333e839352933a58f909755477b9aaf","sha1":"3c2f7e8f9bfc19686f6c315e367cf7fdb482c78d","sha256":"1e91b6fe4d480e22497b684271105eea7eb2b93152797e15926061b2c84563fa","sha512":"ae36a5f816ac92466c2a63bd65576b7434bba909fa91f14520b88ef4af788399e75999d1868dd8500faef194ee6cc84498f636a8e81df7a5e08c639bf32514a3","ssdeep":"96:ka07wsAKuuGLriLDzLiGLroLDzLOG1raLDzL4GPrKLDzL8GfryLDc5PLAGdraLl9:d0oyGLOXiGLkXOG1WX4GP+X8Gfmk5zAd","tlshash":"ab919cc0fe7d4296a966379365ad60d9299c1439c89320f3f1fa26244a9cb1f217e91c","size":4458,"data":"","first_seen":"2025-04-01T13:06:23.867241Z","last_seen":"2026-05-27T01:35:41.512662Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"155c982ccfa005e623cb622dfa1073ae","sha1":"3736d5781934cae5a9541b0acc48371c720316f9","sha256":"99052d2a9f62a634dfe532786c3b00238049f60e2361a06dd981ab57ae7cc446","sha512":"c092c0d69b56c00a01299d83bccf9667c4c8c2f17f9c164eaf1f94d2e4a387f6983ad99d2b2088d02ddcbb19407924eb0bcb560151ffa54aaaf9676b8284cac3","ssdeep":"24576:cC0s0W7mFH9PLHTm6Q6hrGbCi9F3HiSwzjdAplkp:cC0s0WCFH9PLH66Q6hybCi9F3CSwzjd7","tlshash":"36656cd5b2d5f4a503e301e6943b1001a33a2c1a740da468fbbcdcd7a96a58e6337f79","size":1519477,"data":"","first_seen":"2026-05-21T22:07:47.99374Z","last_seen":"2026-06-02T09:41:22.091589Z","times_seen":410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/jquery-js-after","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f67ae5d104e764168c5a8c913d0e665a","sha1":"4688ce802e56ec35d8da309404d51afbf5a618a9","sha256":"908955d4ee9b04f3fef2ec6dd266fc09f07e6e5ae90fd8198bdcfcd060886b64","sha512":"cef121eddec117868c02ea8333ac062f609b343e16f6dc68329031c5a4937d67aeb2fe68a6af4318286cbb5f5739cf37d5f232ce067820d1140393ee9cb85ad3","ssdeep":"","tlshash":"a9019c1cf044101445f7703990bf7756b6137876e62b0086428c88b82e2cb388d63985","size":797,"data":"","first_seen":"2025-12-04T20:00:02.591999Z","last_seen":"2026-08-03T03:44:28.75605Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-12T12:39:33.572818Z","times_seen":1015351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5015,"data":"","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-08-12T12:06:08.640498Z","times_seen":37847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/nav-tool.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e28a1be506d3151bad02d20a7751f09c","sha1":"d0a106cd4d593b36c86c3740d26b6d332c740207","sha256":"e35de31330187c0f62603f8b770e2969cbc3fe0d885aa02c7dcdd6fbe5134691","sha512":"e7faae5c7937eb0e2569b90d0dd804b6f0a5c72d30f148770f36c5bde1fec88fe412be41416f91d1caf5fdf6a07059a31119673bdd003ec9f70789eeb9c84455","ssdeep":"","tlshash":"ae11aa68b830e2fd01fb631930139e40c23a0dc5ca2c1d95982019882e6bdcf41eb7fe","size":1086,"data":"","first_seen":"2023-03-07T12:02:54Z","last_seen":"2026-08-10T05:02:00.159335Z","times_seen":954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/comment-reply.min.js?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","size":3026,"data":"","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-08-12T12:37:41.413092Z","times_seen":92597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0216420d3125595a439df049ae7d7661","sha1":"f0155f6a00ef8a06dd6ca05c3b89508babc9fde9","sha256":"4c1c2db27db471a7e097fe723627d02ed29f09d98d4d34020d7db3e8985b6a79","sha512":"69091cf987f2e42581321cd6040ca0a842cd0197a1770160eb42b791ccb764ec9d866dfdf622c884c36298359b1d896d5a5c2310843831160839b7fbb5c31757","ssdeep":"","tlshash":"4fc08ce6ae980f1601612de0493436a32039f126ebe198096a82d0840230e46ed68251","size":145,"data":"","first_seen":"2026-05-27T01:35:41.608035Z","last_seen":"2026-05-27T01:35:41.608035Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-12T12:37:24.050546Z","times_seen":341374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-i18n-js-after","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ca363b229a220beabead9965f96c7f7","sha1":"7ef3c6a6b11ae8d45d32d6189d1653de001bfe56","sha256":"de60431e829bcbbb328f227480620272b8fe63a2f73ea38c15a4407e93c04b7e","sha512":"26458d9340499e948a7b95b9e2e1d14551e59efda1d5dcd1171bfceb4c5527e96203f6c7301722d15454efe76727eadf0223b4631f869b5a5ad24c67111ef629","ssdeep":"","tlshash":"d33112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":1447,"data":"","first_seen":"2025-12-10T05:46:13.783818Z","last_seen":"2026-08-09T23:01:57.063861Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/elementor-frontend-js-before","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"089a75830b0988d93d6f63a0199a42f7","sha1":"cd770d5f8732a4a875858b4525989cfac5767c27","sha256":"759650d3750f4b03c3091e8dd2cd909717e2b88b6712e1de4de2d162f426ec6f","sha512":"bb04e1d96fad76378c43bfc85426057a373738dd032c7da5fe676d048462efd7683eda71d07ac39e14b534df858612be504e22a990afc56c7f06b4bbee0aa6ec","ssdeep":"48:a4AFkPuRv/1rOZ4dXHpMut3IZPeCWP5JixJBtpv/KJ6J2lGRogMRELHhyWuuDms:a5qPCuUUeXRJwJBzvSJ3URo8Fy3ns","tlshash":"c5818221fa055e7b83e78bb03927bb0658ac0526c041b9a5f4fd486915f2d253607d8b","size":4100,"data":"","first_seen":"2026-05-27T01:35:41.609894Z","last_seen":"2026-05-27T01:35:41.609894Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/wow.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"11ac4d7173a68c50169addca2ef1b827","sha1":"621284d032a248c41753e995680fc30089bd374c","sha256":"dd90fdb6538987fe7975bd43803b1c7d8d62912a371c788caec32d016e09dca8","sha512":"658888b9d89577b55798fc56451f9458ba9b4885573a96480fd9bd480cb59854769964da9a5f54feba19ba66fa6df44c79203d35f1d6d9cafd84886c58e233a4","ssdeep":"96:3GqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:y30suCYOVEE7ne4JqgpIwdh","tlshash":"bbd175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f38","size":6300,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-12T03:05:30.164853Z","times_seen":5550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.0.4","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ea167534bb1bb8c0471f464b68224e4","sha1":"b5c33aa343eb16ee284e11165a2d2d42ace2bd36","sha256":"10e28fdeaee6354163e573661ef553854ef23cf4fb8e39107dbc07a2514a7778","sha512":"3337a0b249648fe44056caa6859da83b1c67c3852c95adb8b8b65a85f86bf1439d32899a3d735a201c595c847e15038e0337cdffcb41446acbe9f932e061149b","ssdeep":"384:XCxrlOkxR/iF/iiMg5iJfiT3iFQJklrzKCQy64+/ibfiw3i75iVfiW7Bfij3ixgo:arMUR6F6zgAJaTyFQJklrzKCQy64+6bz","tlshash":"b882dba5fedd562c00e512f5e56a42c9b42c5432f806a89d3e3cb4f48ae0fd78cc5a5b","size":18215,"data":"","first_seen":"2025-08-04T06:39:35.825104Z","last_seen":"2026-07-13T08:07:56.92939Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/bootstrap.min.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6f488c5766fb06169100bdbd2b4fdbd","sha1":"f7365985962f78092d8eeaca6d6633d6fbf75583","sha256":"0ce9de398de7e7ec63e836b70090643c7c5a3f29ea4a519a67defdd206c13ac1","sha512":"f18f1e18af76773a2ec2944e229a70afed243dabaed2aaad9f365934417c3dab79b6e44d2712570a46d07c9d079541b7cb51c1df3d7c0922a6528ee2db370fa6","ssdeep":"768:KZYN+vOLYakObgUDZj8fW+l3sLaSLPe6CMhYVRK0H/9V2Vz/kq8GPnl+G/AX22b+:Kk9PXht8xm+Yx2UPnAe","tlshash":"2443a5563244b8330ade85a78136434bf7295c98b547806cb5bc6cde2b7dc863276bbc","size":60104,"data":"","first_seen":"2023-03-07T01:19:35Z","last_seen":"2026-08-10T01:43:08.461093Z","times_seen":687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/isotope.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c61eb8802947bf0d14f5430dfdebcd","sha1":"462535569e9282274bdd71e0a1393052afb426f5","sha256":"4fa72a8e292674529c8c0fdc8b0ccb7974e214d83e862316e91743ed7453b1c6","sha512":"7a43ace9c2badcf6e170cd09a0b4e53232e52f0e0f6e77522e2af9e02a0ed8002c7437effa4e51e8b32226bbdb2d6c2d78d7c2e507615b8dcae28f6756d274ed","ssdeep":"768:njlIew3PtifBnQ/KMDwmWD6sMKD6gjfGQre4+uhFVByQ9zx:njWSBnQ/LEBD6YD6Ee4+mf9zx","tlshash":"3803b649b74079304387b1a696af110f733aa47ca90690ecb369d8fb1cb684d6133f79","size":37779,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-12T05:58:33.605426Z","times_seen":3300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6333e839352933a58f909755477b9aaf","sha1":"3c2f7e8f9bfc19686f6c315e367cf7fdb482c78d","sha256":"1e91b6fe4d480e22497b684271105eea7eb2b93152797e15926061b2c84563fa","sha512":"ae36a5f816ac92466c2a63bd65576b7434bba909fa91f14520b88ef4af788399e75999d1868dd8500faef194ee6cc84498f636a8e81df7a5e08c639bf32514a3","ssdeep":"96:ka07wsAKuuGLriLDzLiGLroLDzLOG1raLDzL4GPrKLDzL8GfryLDc5PLAGdraLl9:d0oyGLOXiGLkXOG1WX4GP+X8Gfmk5zAd","tlshash":"ab919cc0fe7d4296a966379365ad60d9299c1439c89320f3f1fa26244a9cb1f217e91c","size":4458,"data":"","first_seen":"2025-04-01T13:06:23.867241Z","last_seen":"2026-05-27T01:35:41.512662Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cc5397b48493e6282541641b2ff198c","sha1":"6478b4ec4c73af07e78de76c0445515c735b0a2b","sha256":"a7b9f3c8dcb2fe6f7abafc0045e896c2f56ead6b13e062fe22a8f19b623ce796","sha512":"14a3b079e758f59c0f8bac93e6ded5a6297ef92250b6417ceeab74ce999a26677a38f48725856d54ca4af7fcc132e37a9c1979c61748c35edfbdbce2c01a4489","ssdeep":"96:kvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3SJ:xN0LE0+1lfYsvSk","tlshash":"6b91869ae77638dbb2f900f2697e0d47eb614436d6c8d438c9bea3141cb5893c274a46","size":4388,"data":"","first_seen":"2026-05-26T18:41:55.89585Z","last_seen":"2026-05-27T01:35:41.611502Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/jquery-core-js-extra","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"db18180218df41dbc388c28a6b5036df","sha1":"016ac63f399d4dba28ea97995193515526c3619c","sha256":"07e2c1ada8e962dfd047412ba95b87624498316ce40e6e818c2a93559e4c3713","sha512":"e37a2694db84e59d07018cf5e98fae56c93c5874b75089102ce34b4340e8ef38bdbae193c86269c77ffac464fe738d3c609c4ef268f86ae64096dba5304b79d6","ssdeep":"","tlshash":"62d08ce6ee980f1641612df0493836a32079f126ebe198096a86d0840270e46ed68251","size":231,"data":"","first_seen":"2026-05-27T01:35:41.612255Z","last_seen":"2026-05-27T01:35:41.612255Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/cookieadmin_pro_js-js-extra","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ad247754c300fc4f9cb1e12feada5be","sha1":"dc653949a59178de7bdc248463dd75df791becfc","sha256":"5ea2fd836e255e689bd6f1aa45c1723b3b13f0d764582dfd5f83539ea43dcac3","sha512":"46097eedbca4460f5a0d0beb7c7319a8133a88a3421428d06eac7c262e167d1d0e31ad2c0aa23750c67cf7ce8c408de31253eeca22c392a7c2216ee7081780da","ssdeep":"","tlshash":"923122c3dffc0f0623880ef0641d61264890a823e9828c48c38ef88003b0ec6ac84083","size":1563,"data":"","first_seen":"2026-05-27T01:35:41.613542Z","last_seen":"2026-05-27T01:35:41.613542Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/cookieadmin_js-js-extra","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"97866b7706af63db101fe5ffb072e0c8","sha1":"acb438ea8f4dcb74d97f8e9d3ed4c0bf6868affa","sha256":"dd8808950da26bbafe4c9b5013e5c6195ebce1b35fb59f84c65ee359cfc2707f","sha512":"2754dd69f366d02464d1517c52542e9820d793eb9b7b942c085e8014c663ac78534a0b0fce93e187c5f475b3dbcb110adfb65c7ca0818f73c5388b9daa9ce50a","ssdeep":"","tlshash":"07816a36faec966da68307f4d5219a8d0005b105f2d84d5eae39e47ce1c1fd3acc2207","size":3941,"data":"","first_seen":"2026-05-27T01:35:41.614611Z","last_seen":"2026-05-27T01:35:41.614611Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.30.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e419e77b7d10e0c0aaa242bb11d9b19","sha1":"6a5c86ad22a9685fc739a1cf2a6e41444e2d55b6","sha256":"75c9c014178fd157c4ff9f8cfd9067fc30d2d8432c729504e9a75f7aa8bb6123","sha512":"3c0baef186cf851218a8c23f4c6a4dc3adc0527e7fb916e0c274b5a811b55c93129089db4fdd1b707a066f637d8bf73378ffba75a3a40bcb5091bd5f3c16d5b5","ssdeep":"96:BrAtsNvDdfzjqj3Nhxl8O7AEQQ1vg+lsmejl3i7wVjLUVsc+2KBbZ7Qah88/2:+sNpzjq33NQWg+smeMs5QTY1V/2","tlshash":"24c172d41a94fc2b22e135d8e10b9734662fc0337c16f9c1fa21dce955e8ed183aa532","size":5700,"data":"","first_seen":"2025-07-22T15:49:24.312063Z","last_seen":"2026-08-12T07:51:56.317693Z","times_seen":3089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/odometer.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"519a5777444f5965b6df23e26c69f037","sha1":"fe5beb60997c84ab2f91b54535c4221443cdd21f","sha256":"03c1e188b884240e56a79c39b6918e16e9cfdf9b4ed4e84d5d8efe71fef778ae","sha512":"3ee200bb01031ea959bad625e2294fdf810b5a3d667d8c69330780be938c2a07734cf3a6c42b942bc9b28142c1e1d2787a835c1afd16089eea2dc9dccda29f83","ssdeep":"192:xABzlvk8QecC6AOcu2flRdI5s/GMjXuu/T:aBhvk8QecCa07z+Wd/T","tlshash":"80129580be02a725875371e151bf0709b7bb99ae6404401df67c9cdabe25c38e12bf74","size":9896,"data":"","first_seen":"2023-03-07T01:14:43Z","last_seen":"2026-08-12T06:09:36.226839Z","times_seen":1584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-08-12T12:39:33.484654Z","times_seen":226884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.30.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3120f503a07296ec70c204ac4f02b93","sha1":"bc4e010d9496099695d3a8c201fca0464e322177","sha256":"4db7f8317e6c69c1c393671a9ef8faa76ad4a8d8a8c8c426a5d0f9e2d90d7d97","sha512":"1864b40fa1c7c0ae304c9fa84c0a06c8cd92c18118a91efe1f98efc53ac8b3c7d4cb437e00c73ee85aa6010e402cb7be4e8a94150070c5e5a5731df19f3730b8","ssdeep":"768:2eAjA6wk9C+QioJHYNQAzeLHeBHmjkSK7+z1hlN14cR8+AvNKRiA8m6XS3gzlAIT:2eAjA6f9C+QiSYNQAzeLHeBHmjkOzRNM","tlshash":"bc23c7853652f4f70beb40daa02f450af25619a8640df4d4bfe9dce19470e8e237ab74","size":48393,"data":"","first_seen":"2025-07-22T15:49:24.337517Z","last_seen":"2026-08-12T07:51:56.406229Z","times_seen":3093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.30.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","size":15073,"data":"","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-08-12T12:17:03.603774Z","times_seen":72875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","size":5697,"data":"","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-08-12T12:06:08.764479Z","times_seen":37056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"0470f52ca4eab636c93c56560386d379","sha1":"63ab47a49a6a9ff0d6eef4ca475859b006f13195","sha256":"4290cdfedfc53dc055fd4a8d2cdb34defb9cf18be4c7a267d185af80755ad240","sha512":"305d89bfb97172068d8558c62c9ac9e549c4822ac6820b9f580187d435b6771628e5a99678a5268f30d7cd7c665ffe018ad4c15e792ba329ce2b2902b321ac17","ssdeep":"24576:2C0s0W7mFH9Pf3rmwO6E0vbCi953HiSzzjdApFGF:2C0s0WCFH9Pf3ywO6E0bCi953CSzzjd5","tlshash":"4e656cd5b2c5f4a507e301e6943b1002a33a2c1a740da468fbbcdcd7a95a58e6337f79","size":1517676,"data":"","first_seen":"2026-05-22T03:31:47.313128Z","last_seen":"2026-06-02T09:41:22.092346Z","times_seen":380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2024/10/icon-68-1.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/icon-68-1.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Jul 2025 11:58:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1733\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"5d831e6b595327c7a8accba4c3969eb2","sha1":"611d09067256685d69c05140ab3e872adf7b2f29","sha256":"6528d17566c405338e9e7a3241315a90109e90c190af789dc8e89146b806f425","sha512":"eee3c1cf066b365d793b8d15a76f5717a7ef2fb6882854a307bc455add6bfe126d7bfe1e28ee6229d011fbe940c04e500bf12c383d10438626dc29ca9c0c340e","ssdeep":"","tlshash":"6a31084df6455840a9cee9923ce55203980280a0dc84e2a2a8cffc577a507ba4a954cf","first_seen":"2025-10-17T20:34:56.866174Z","last_seen":"2026-05-27T01:35:41.462007Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2080,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2044,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/cookieadmin/assets/images/cookieadmin_icon.svg","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:12.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/images/cookieadmin_icon.svg HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 15 Jul 2025 12:39:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 738\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":738,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac4f8069f74c4a83cfcf736471ed9894","sha1":"8e1b411b6f11ef7f9d4c15273b00e232806c1840","sha256":"1c1ca5d2744c185a68b3991a50cb400d0fb126b311fa5249f556a1ea82a220a7","sha512":"43d537b824606ce079bc2123ff86dc996e337b92e503eb6080d52411150cf2858220a74309d0f23df9f611d50345e7bfb1039c8cca643b90550cfbd11e90e8eb","ssdeep":"","tlshash":"8801286ae11c5a1e91020364d3277632a26fb4ede2881b3811acc870e701bdbe4279e2","first_seen":"2025-07-22T15:21:11.528647Z","last_seen":"2026-08-12T05:36:39.549214Z","times_seen":3229,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/da8269d/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:14.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /css/da8269d/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 27 May 2026 01:35:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 25561\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"6a0dbb3b-63d9\"\r\nexpires: Sun, 31 May 2026 13:49:38 GMT\r\nlast-modified: Wed, 20 May 2026 13:46:35 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-21T13:49:38+00:00\r\nx-node: m9-up-gc41\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137948,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1f06fa8edf5c67ac64217c0f32bd0432","sha1":"6b2f6f757cf0593604e0047c6d6eee2535821217","sha256":"c9743d00e642be1dae8fa276ac280a552b9ae3a5d11fcabdbc39fd40f0cd7deb","sha512":"40ae38b128d2b67493f19c83f856cae6455a18384846ee07264d5735fb2aee14897b905ab9bfca326144276a3c7933fbc83f93c514b5399339c1a6126cda2c13","ssdeep":"1536:SL5GTKVyQ6V6Krh0Duwyu2o2ESipVyG6D6v+Jlr4pUU62FkPQLi4OhlODDd6zcj1:P4VouHysex/VI","tlshash":"24d3e96aead2953ce51e541ac8c5aa3ca53de502cf330daff344f3e187ca6e21276505","first_seen":"2026-05-21T22:07:47.943222Z","last_seen":"2026-06-02T09:41:22.083889Z","times_seen":414,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.30.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.30.3 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:49:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6482\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53422,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53382)","md5":"06a6d551bd028bc6f7f502df263b9865","sha1":"c001dffab2e05e1ccd5b3c55ef1b46e7fe0e3336","sha256":"d876e3ee79d2b31d34ffa94ad3b3798624bb56b82404251ae6bc59b430d451b0","sha512":"52f10986856f96e84d9efdc6de34e575ef2feb854cae1d62bc6f7def8e7f6d9325331f737d32b157a3774bc7bd8929518a75e7a389b833b51786f82fa8a144e6","ssdeep":"384:zvrJ9/vmyeUaEMoZ0qk0e/RmRC5Cz9TfikvmGkvmCLldlRaE2ksFrOk:HLRdL2t7RrlNX7skk","tlshash":"7633fb623d13b269226f442b82d7364c526495c1ee4376d9fa04c523dafece63b36c1b","first_seen":"2025-07-22T15:49:24.346982Z","last_seen":"2026-08-12T07:51:56.376678Z","times_seen":2755,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/elpath.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/elpath.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6220\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58479,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"20717265905dbe9b881fffcc02cf8592","sha1":"bce4f6bb81a2e628405aa39f6090d8149affff61","sha256":"6e68d23fe58a350fbded94f9eda2bc0b28a3f39ff7fd47e159f2ec00935ed340","sha512":"041a52922cfdfb271977aafc1bf8e35cb6cce96c771ebd226ec7ae1be1496d391316f0b3206d8948272aa31e363a83f5a8c44348e0e363171142f0053f77f4ae","ssdeep":"384:JhtR1UXm4yl19bLqQGz1k3TPs20ZjcFXNCCfMsW8ys2s6sgJro0Z5Tdsw1O/TdcC:bSX40rJt1K","tlshash":"fe4354ceded1104993b5afb2c7f51a65ff4c11e30d426592bae02886cfb799d00a2dc9","first_seen":"2023-12-20T17:58:58Z","last_seen":"2026-08-06T19:13:54.76538Z","times_seen":184,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/3MONJtp1c6?ver=1.3.6.1","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /widget/3MONJtp1c6?ver=1.3.6.1 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6307\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"6a0dbb3c-18a3\"\r\nexpires: Tue, 26 May 2026 20:41:26 GMT\r\nlast-modified: Wed, 20 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: STALE\r\nx-cached-since: 2026-05-26T23:15:01+00:00\r\nx-node: m9-up-gc228\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18437,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18437), with no line terminators","md5":"d9c16a93671478a04e67ef6ce8fd8d49","sha1":"01b684e9d048b15a6db62c1089268153294c59e2","sha256":"e9e14e0a77b0bd6574ede9cad8679750cba46508846b46c6da140df5def3e9a2","sha512":"5bddfe37cf1714a45c8be3be1d26c0dfba9b05c59a438fd87322e2cfdeb34f6585c3b86c5ad28adb1e4e75bf812f10792a74a11cbe61e914e6e53a8bc5f1ce6d","ssdeep":"384:boUeJkQCuw6SmbXm0wrA8zuyEQ+EbzXDpGiqJISO9JHW8r08wI+xcXd4:vFj6x0A8z5EQ+EPXDe6/rp+xcXd4","tlshash":"51822a6e7959b93383b108f5a16f620a773549ebd404cc20a405f9897d78ade813fee8","first_seen":"2026-05-18T13:47:45.536253Z","last_seen":"2026-06-04T16:04:43.518197Z","times_seen":717,"resource_available":true,"data":null}},"time_used":1040,"timings":{"blocked":446,"dns":125,"connect":91,"send":0,"wait":92,"receive":26,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/metform/public/assets/css/text-editor.css?ver=4.0.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/metform/public/assets/css/text-editor.css?ver=4.0.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:51:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3261\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22474,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22351)","md5":"51c3a61609244c0b628c20d87c96d59e","sha1":"6a52aab14398a1399b28babc97a9b8774fbf8751","sha256":"67f4ca9d4ea4fcf15d968412f1dbb29db656c75112dd3f8b5bad5a635e1d2730","sha512":"6f7eadf9f541f83b9c82c8201df2443d060d63e44c24455e4a86ebe79c5dcccd57436a8fc04eec6c15ee44c2d22495f825314a5bd38f60837301f43997b6d236","ssdeep":"384:MnOcPYvHvFxDn3lXzfHHfhBN0QMlLbmSqld6GOWeX:J5bBNHMlLbmSqld6GOWeX","tlshash":"2ca2c01efd4728ff427a643ed14512d41fcafb73b0e3529af491e98516ee0680369a2c","first_seen":"2023-09-22T20:29:10Z","last_seen":"2026-08-12T10:40:31.695786Z","times_seen":8778,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/flaticon_flexibank.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/flaticon_flexibank.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 609\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2038,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b10530576710f2a66c4c093a695cbc76","sha1":"ed3f0b4c4c7b532c3f7c43ff215675697eb103ed","sha256":"1269d3e024986d256f97e754acadbbac40b85f1c54b5bd4a320fe4467ae27055","sha512":"44a32e8d48b57744c6d8f955d41c83c0d55db610d943a126d2b2780fbb48f375f904fa000049cf4eea209cebd451d24f7f20f2a1880f6c9bc82aa48212c6ba35","ssdeep":"","tlshash":"f541f3a844ba045057109da622ab7326ef08701b9cc4ec6db249be5dfff2d91c3513cc","first_seen":"2025-08-09T17:44:04.856476Z","last_seen":"2026-05-27T01:35:41.473738Z","times_seen":19,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/elementor/css/post-298.css?ver=1779613077","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-298.css?ver=1779613077 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 24 May 2026 08:57:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1190\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19862,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19862), with no line terminators","md5":"bf303156529e0c5d88da2d304715fd36","sha1":"172bae0367f849aa7b265ffe263c9931d106e7a7","sha256":"4f41cd3cfe881a6ae1437d9ee56b613ee3fe0eea91e9d8b0cde60375f18fd11b","sha512":"2196e4cd65200aa577223de00c06bcff2ff63c5135e99ada32f6ff3a4dedb9a40e582e4a5f017e1d3090de454808ee3556c3847e3d3e2c8fbe9325cf6fca8d3e","ssdeep":"384:gJXJBJbPJGJJXJMJrJ+J+JnJGJhJ/ZJgJ+JsJOwJYJMJIJ1JCJSJzJWJAJKJWIoq:i5PbRQ5WFkkJsv/nik2OyaWKLQgN8C4B","tlshash":"4992f6273e436b6c732f501f8403799c261598cbd22e66c6ed606633f8b9c9277a079d","first_seen":"2025-11-18T08:18:58.885669Z","last_seen":"2026-05-27T01:35:41.474806Z","times_seen":7,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 06 Feb 2025 17:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6812\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-12T12:37:24.050546Z","times_seen":341374,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://virgogoldonline.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 May 2026 04:00:24 GMT\r\nexpires: Fri, 21 May 2027 04:00:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 509688\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-12T11:46:02.957784Z","times_seen":33472,"resource_available":false,"data":null}},"time_used":1079,"timings":{"blocked":510,"dns":0,"connect":59,"send":0,"wait":48,"receive":11,"ssl":448},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.css?ver=5.15.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.css?ver=5.15.3 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:49:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 732\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":732,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (312)","md5":"1f1c6abbb54c6d189b7263e0861fae8a","sha1":"6bc092e1e58b2fa6364bc17b02443ade0c6d32f1","sha256":"5009a34e30063ffb89185274681b359ae8c7dac19a606d5b1456ee3524cbc9b0","sha512":"7dd9accf0a69d2a89009443de17d6f09c3ca55e62fe9c7c4d3f12f89354b11559d83436fbc4befc8618ccbe0fe46fea657743d758e543b79a3d039ce36852b33","ssdeep":"","tlshash":"8f0164b0810510048a40091a2bdfbf28ae09a245781daea572239c1edcf4e4d61faf0d","first_seen":"2023-04-10T17:28:04Z","last_seen":"2026-08-12T12:29:24.989992Z","times_seen":37023,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2024/10/banking-2-1.jpg","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/banking-2-1.jpg HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 23 Jul 2025 11:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33004\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33004,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x200, components 3","md5":"468dfd1a0aff34d34e342db717e002bd","sha1":"d7e1fdbab7ec1107128151838e1b0eff143da161","sha256":"c35dd8bffb73a1d716921aa2c3a4b8c0692280dc88ee9b6f1ca8fc306099cd66","sha512":"a23f3419c1bab23b0b457e99c65a232dd24df7b061abcaf21200d2d340400b7cc41f8f18b12cfdbad3ddcb74ff8f6d8511a161ad38cb7a577721e75733b12035","ssdeep":"768:wT4tO/otvtyxaDqcdL8RHGVxsXceYL2HriA1TeWboJ:q4tFyxARdIEXsX4qA8K","tlshash":"f2e2f26dbb681c921ed06e45363289950788f9d0d6f3e141a018aa167cb7aff13076bb","first_seen":"2025-08-21T04:39:53.359667Z","last_seen":"2026-05-27T01:35:41.482182Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1109,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/metform/public/assets/lib/cute-alert/cute-alert.js?ver=4.0.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/metform/public/assets/lib/cute-alert/cute-alert.js?ver=4.0.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:51:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1009\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3516,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3516), with no line terminators","md5":"687012715b5ae1b4aee2822874235bcb","sha1":"0b7ae672c447fd031fa9ecfb3122ea7fb3a5095a","sha256":"cf8070f5f0274ec5dc179e202cc128e168d688ad1878965fb6ee346c18533c68","sha512":"c02ddcce3f00975438d2609de012bf62bce068c599839f58c34b5548704499143c05dfa3646d385e41a9f41e2c4ee0b6df0045adf5152ce6e34724c67579f802","ssdeep":"","tlshash":"bf7165b281c28e3b1af246cb519897dd7ee0a006fc8b1c9774ac4edc17dbd428de2152","first_seen":"2024-03-08T09:57:40Z","last_seen":"2026-08-10T06:06:43.528404Z","times_seen":6300,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.20.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.20.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Jul 2025 13:51:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6470\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25066,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25022)","md5":"01e91317c562dac480c359af16112ebb","sha1":"8bf66ac50e35e809f98ee3a644f47b026ca73645","sha256":"1d9a012bd94a87b7551f2457174092fe60669b612aaa0b967a95a9488a744f83","sha512":"c821106b74056748c199fbea80bbb2450791f18b8959e5b0f84fc86153ed3667f18972ae9171047277072d33d5f44130ff38576f180435cc17508f2fcca957b2","ssdeep":"768:pTLX+EVxFm6cKibdndptaQ9HuGJswyC/pkTAQYtDT6HJiwknOsN7KOljuOzQYqER:9tVxFm61ib94Q9HuGHiiwkOsN7KOljuy","tlshash":"7cb2d9063153a87a50cfc15be067420e7b3748857405b0ed7abc6ceba5b8d9a33ea335","first_seen":"2024-03-12T09:44:34Z","last_seen":"2026-08-11T14:37:58.691143Z","times_seen":629,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/color3.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/color3.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 152\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":152,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1a86c2471aabecb7b1ca40b2e0185064","sha1":"53f8ba00272104b19428974bde7eeafdaa057abf","sha256":"400fdc341be94fa46718876565035e1ce18772dd976e7491113128641fb97071","sha512":"c1a9ae4d4766b17b7e098a40df3ff599095b1b0390600a6ce4b5da45ff45d3340c543b78e5e5ab5407c79c7e44d75b233b202db20afbf8991eef681d933769eb","ssdeep":"","tlshash":"56c09b1ca117611607330a1f7268ac055730148cdd41ef0478d00f65198b3042cbcddd","first_seen":"2025-11-18T08:18:58.876942Z","last_seen":"2026-05-27T01:35:41.485263Z","times_seen":7,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2024/10/icon-69-1.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/icon-69-1.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Jul 2025 11:58:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1745\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"74cbb9edb50f674231f16f9cd1f34a34","sha1":"e2e5690341275e494d1146696b457aca1ceddd89","sha256":"eb6f0b313e23b690abd24812fa9e4de1ff66698b7cf0e2b7b74f7a253aa3f592","sha512":"d14a1cd32c4d83bdf6ea952e8bdca9b80a4e2727ca1bb60ec94fb3cf97fbc11918075e3d7b3776f91c47fe23b8bfdf4a3359c4245ff90f9c075bf123bb9f3cad","ssdeep":"","tlshash":"0731c61ef7151802908dded62ce6d113e9260580c5c4f2e06bdfec229a6c2ba194e1cb","first_seen":"2025-10-17T20:34:56.677487Z","last_seen":"2026-05-27T01:35:41.497631Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2080,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2044,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1779371255","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:13.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /js/bundle.js?rand=1779371255 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 27 May 2026 01:35:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 342498\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"6a0dbb3c-539e2\"\r\nlast-modified: Wed, 20 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-26T13:49:50+00:00\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1551945,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d335b09bd80d314cae6eff2a112fd378","sha1":"b0501f2069f3cff4589423f4dfa928696855bbcb","sha256":"95a62828cfb2dfcccd5b2fe9f49737a2023658b7c6c18e3ba2741d66d7a2c29a","sha512":"7dff5fec411fe138760b26762015e8bc3e0b0a0e77288f8f478397134073d5deb066bda519d43a6b06eea49d75907e5ff8348c58d57416ce17c131ef3aab898f","ssdeep":"24576:DcnR2K48WX9n4Aw/LuQhLMcgBVMmM5SsC/Td+SA:DcnR2h8WX9n4AwucgBVMmaSsC/T4SA","tlshash":"a1255bc5b1c1f46503d355e6603b2009b23b285e7809b064babcddcafa6759e6233f79","first_seen":"2026-05-21T22:08:58.783028Z","last_seen":"2026-06-02T09:41:22.083356Z","times_seen":408,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":522,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.20.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.20.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Jul 2025 13:51:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 41218\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":455792,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65492)","md5":"14290efa356c4b46d67b3d440316900d","sha1":"cded2ce49ad157eb4fd5c03cde97d2bcc3057b8d","sha256":"bb398c57fb8ef04fb37fc9b75034ab3b6d6a60272db0ccf33e5725ace0154413","sha512":"b0f9f3d604aebe8445ed7ae8f8eaca47d48959905d12610b62db4acf495d4a9cca3a28e69b11461748914db50d6be8f07612e63f76d789305a24cfcaf1427ba9","ssdeep":"6144:HXDtTqrSR1XJPY2YaPIbszGjYhmxoK/EocWK:HXDtTqrSEoK/Eok","tlshash":"88a452a3bc23592532ef602f544365cc395094d8e6435ae8fca26a0f4afacf5733562d","first_seen":"2024-03-13T10:13:10Z","last_seen":"2026-08-11T14:37:58.69334Z","times_seen":285,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/custom.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/custom.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2357\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12626,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e2b771287c8e76d8d028458e1f2945aa","sha1":"555b9a5c0dd364db91c5a0b1715dc641d7a2eed6","sha256":"29f763bc599d439ae7564d3514fd52a24fbf1d7aac09e12ab82a19ec899d0c4c","sha512":"f3844afd04d57a3bbbae9eb1607b61085dd82b1310d512e2880d2581833708428c2a172734c0560de632f810019c778131b322160188bc365ecc9a25c8a692a3","ssdeep":"192:Hde04ej0H1TUJOvvM9x1SZ1b7IRsCRweLZyebbDNje5KvP2f+zdDtJguyyjS:30Vg1eAtK5","tlshash":"88425554a2210d9e723366747bb133d14a5840dbde0606ecbf647204c7afbdc557678e","first_seen":"2025-04-01T13:06:23.784758Z","last_seen":"2026-05-27T01:35:41.507346Z","times_seen":22,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor-pro/assets/css/widget-mega-menu.min.css?ver=3.26.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-mega-menu.min.css?ver=3.26.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Jul 2025 13:51:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2698\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20270,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20226)","md5":"259f26a6fdceafd9c277b2bd2ec90996","sha1":"b25d4106fa69ac55d29b5ee02719deed8bf7848a","sha256":"0fd360c84e167ae9a89ea5c3c09d6e9fdd1859a05f468fb8330d124391926643","sha512":"09622593ca3cd8d75747f9212ffefab8fe2d7300e35b5ac0116515efc171794358edc42d9172313a4fea4e9b883543fdb5d4be8e9256cdd1018afcae61946972","ssdeep":"192:qMW1QG+jfq/QShnAULe5KqCV+6yCh2syO+Lbt1h1PkQk6rOUIJB4P:qdQGKfq/5pA6Vx06GZ/Dh1876rOhJK","tlshash":"6692b9c078d3c021561faa5903daed2997797890dbc948d4ac79c5062edffe3a2d0b36","first_seen":"2024-08-19T17:24:18.772494Z","last_seen":"2026-08-11T14:37:58.678406Z","times_seen":63,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2025/07/VIRGO-NEW-BLACK.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/VIRGO-NEW-BLACK.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 24 Jul 2025 14:03:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3153\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 37, 8-bit/color RGBA, non-interlaced","md5":"86e16870ebeceb5aff696edf58a5b15b","sha1":"de07cae04bd56f142e1abfc0405e3b2ef1f75374","sha256":"4be034800d10a2b5f6b7a142f077884951042e431c1502bcbde5ec0fab1f928a","sha512":"405046f3554d3fbcd3c57d1066f1621646cfb5b5bf73d7a941fd6cea2db8d6e809c010077d38a509f9b69c95897b68bcb7fcc367e43444ef0624211c43bef8db","ssdeep":"","tlshash":"06516b830713bd33ee77940eda325334dab7d43d9863e331789587a26631aba42b0534","first_seen":"2026-03-18T17:02:18.19896Z","last_seen":"2026-05-27T01:35:41.509169Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1048,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/jquery.nice-select.min.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/jquery.nice-select.min.js?ver=2.1.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 930\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2942,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-12T10:40:31.655745Z","times_seen":10605,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/da8269d/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:14.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /js/da8269d/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 27 May 2026 01:35:14 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3419\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"6a0dbb3c-d5b\"\r\nlast-modified: Wed, 20 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-26T10:24:24+00:00\r\nx-node: m9-up-gc231\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10579,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10552), with no line terminators","md5":"03b76bd3b0e04c97b6ef056034130734","sha1":"ad1a96fcc81ce36b53f62335a3013bd0618d5587","sha256":"0f311a27d9df6158364f9d7bf0a13f8aa5161fc0b64ffd2946472957288a09b1","sha512":"61553be349ec52ab3dc14091311d0b7916f500a8aa92b0be7f8772a9f25f1e41a1f2f658596b958ad4ea0114f9119555f5af55a1841eb780bec403cc45a97875","ssdeep":"192:xbhNmk/7Obf14M63OOIpUTPqZ8BijFLeEJK:xNNH7ObdF/OIphZ8wjFCmK","tlshash":"3622e71ee7017f360faa13c3748f7752b6a480e992646cb5d89c826943b9bc972177cc","first_seen":"2026-05-14T14:28:59.262546Z","last_seen":"2026-08-09T11:59:13.090537Z","times_seen":472,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:15.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 27 May 2026 01:35:15 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6a0ad858-16b0\"\r\nexpires: Thu, 18 Jun 2026 23:58:17 GMT\r\nlast-modified: Mon, 18 May 2026 09:14:00 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-19T23:58:17+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-11T22:11:54.690188Z","times_seen":16742,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:50:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 582\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4458,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"6333e839352933a58f909755477b9aaf","sha1":"3c2f7e8f9bfc19686f6c315e367cf7fdb482c78d","sha256":"1e91b6fe4d480e22497b684271105eea7eb2b93152797e15926061b2c84563fa","sha512":"ae36a5f816ac92466c2a63bd65576b7434bba909fa91f14520b88ef4af788399e75999d1868dd8500faef194ee6cc84498f636a8e81df7a5e08c639bf32514a3","ssdeep":"96:ka07wsAKuuGLriLDzLiGLroLDzLOG1raLDzL4GPrKLDzL8GfryLDc5PLAGdraLl9:d0oyGLOXiGLkXOG1WX4GP+X8Gfmk5zAd","tlshash":"ab919cc0fe7d4296a966379365ad60d9299c1439c89320f3f1fa26244a9cb1f217e91c","first_seen":"2025-04-01T13:06:23.867241Z","last_seen":"2026-05-27T01:35:41.512662Z","times_seen":22,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=2.4.5","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=2.4.5 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Jul 2025 13:52:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 776\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a5bf64d5859ee94a3e8e93d592d6d2a0","sha1":"049eb63b42dbb820b06870a430f523bf06880721","sha256":"25825611ade7ceaed7df3862ec56dc91ad1d2be539966ef7bbe84306e51cfb08","sha512":"22c9c7ad86ad2b45124c5ff6b0a41e271ee176cfe0249c973877e51a1895f6d25c8f69b1c4eb565f5fe5e2befe2f4b80d4a89dcea57eeac43b3ae8e020469809","ssdeep":"","tlshash":"fe019024b14eb96412318c28f561857cb1be81075b05997275ecd19bfbde740c02e2c4","first_seen":"2023-04-05T05:47:47Z","last_seen":"2026-08-12T12:29:24.981874Z","times_seen":40605,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/responsive.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/responsive.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4201\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31685,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f0dce887f6da538cc5273cea0d568d48","sha1":"381d766ad88fdbabf2a6c5b1ec76c35158bffaa0","sha256":"772cb264ae480dc5d737575d87c247baed1371e97206e477fcbc3d7a6114c733","sha512":"31d55c2c80067f337dcfe66c269f3c729bffb19002331356742fafc02412821a55ca3b88c2910188ec7f0b14b7ab47a20aac7974a40128a598e5f1353d51fa3c","ssdeep":"192:bHrduJ5Zs/Ko/vm/sCDwxHBQxAM95akCfqWWsMyPKODpNus8EYp3O27jQHZzkRrt:rAMTAp8ZCCd2","tlshash":"ace28608e9022c0962f2b745efab7649eb639073db4101c5baf5d144cfb9158868afde","first_seen":"2025-04-01T13:06:23.842031Z","last_seen":"2026-05-27T01:35:41.515597Z","times_seen":22,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:49:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 727\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (307)","md5":"8d37441d69ebc9b55dff2c7c214ef997","sha1":"9a292c8559131ea8838899863987ffdcfb4005ea","sha256":"93cf6e96459e42f9f656e03ec4800578dc2c021dcde475c9e5e891a7780b0866","sha512":"25e4e29eadc6a9c8b81b8e000726d8a9eea9d3378ca6faa641d5b9dcb64039ba97904fd0b2bf50a8303b7cd1194d08c80641025a635f8c3fd2ebd9217f824704","ssdeep":"","tlshash":"a201247d81022a504a8008152adabf689e99b0a6785c6f7572329c2eccf4e5961a9f0d","first_seen":"2023-04-09T05:14:34Z","last_seen":"2026-08-12T12:29:24.971716Z","times_seen":37170,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/jquery.lettering.min.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/jquery.lettering.min.js?ver=2.1.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 924\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":924,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (859)","md5":"83f6723631eeb52da3101b72b7624728","sha1":"3c74ddfb1209f2fd56fd58e61829e01a073e303f","sha256":"c9bd115d1d0d0871a3e6b701384a903d7bd378313a0504ae94949f5bb21894f0","sha512":"549fe261b8aed5e27ac8b8a67d38bae6dd91f5315c1b90fd5fc6427db6c41614df3e728987c6f2a0a5c46b08b949c2590582f57a28ab2f5f8c733643c744f3f5","ssdeep":"","tlshash":"4311dcc4f3a3aa07479bb7bd513b620ee26654c354030c01f9a8d2563da7b490aa7ea4","first_seen":"2023-03-07T14:30:16Z","last_seen":"2026-08-12T10:40:31.71389Z","times_seen":1001,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/tut.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/tut.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3038\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17911,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"1f414208f586bcace908ae647a497d38","sha1":"b3a29888602f4b8bcbf8455e35830ee1fc64d86e","sha256":"8d24bef0ac6dd75bb53c4e8c8af0c5ef46df6d077a6d3272df7c0e8e6b644f3f","sha512":"d1f3437951cddff3a9bbc0bf1e98dfc289ce3f70aa79b3a6d4f045717a17b6ab5493fc86d16bf36826fb36f2d3ffb57219351873af6de6a076d79ca2573c5a5d","ssdeep":"384:sHNlT88msMqmHP49yyR0/myDfsAgZpTXe/GUWs3ophfvUqSP4/:6NlT8tsMqmHP49WmyDfsAgZxXe/GUWsU","tlshash":"23826338fe656c0f9322d57cebb466e5ed8500928f0a42f4f990b154d28ecf9162ee85","first_seen":"2025-11-18T08:18:58.890187Z","last_seen":"2026-05-27T01:35:41.522982Z","times_seen":15,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:49:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12526\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72184,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"aae648ec410260f859ac89e58a8372c1","sha1":"f7320458aadcbaa2ed94c43c8d7ddb9361d0b106","sha256":"d417b6ed49cb6ae3dfe2b0bab5d865472052cd0286a9478c74cbb09a02a56d0d","sha512":"88c7cfdc35aa5e4ecbd8023b966758f30aa7d1f5367820a1443922988c06a4a5a96fc500fab19985a090cbc85c9e2e5db63470e50fbc93f5596fee59346c3b73","ssdeep":"768:0bUiiiukQWIsjoQCSsncTpsTO3DNnYGmLN0yPburmvXnH4:0giii1IohCSicdsa3DNnYGeZPK4XY","tlshash":"d963dcfee1ff10944311e4812643e2e4f329b66cec8a4c98d2a67d9df1c165ca186bdd","first_seen":"2024-05-17T06:44:22Z","last_seen":"2026-08-12T12:29:25.017539Z","times_seen":37400,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 17:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-12T12:39:33.572818Z","times_seen":1015351,"resource_available":true,"data":null}},"time_used":1137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1057,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/images/icons/icon-85.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/images/icons/icon-85.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Jul 2025 11:48:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1271\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1271,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"bdb285a55e21799835e68c4ca627cbfc","sha1":"a70e20f8660b3ef7b052d8cc1448b7be04b9f621","sha256":"782f419c9d120a18db07655b2e9cc3c11571b4847d7ef9001cbc86512a31e037","sha512":"9fee802cbb55fc106675565a3b26d15d913872d2e607a5c79d77d7823e1209c3a6e4c64c92f05e5b23e97103b77fe0100752df37ea3d3bc037e813a811aaa2db","ssdeep":"","tlshash":"2b21981cfb426d43814dd94b24fb40239c168880dd99f1a1b8cee8665d202f94e4a5e7","first_seen":"2025-10-17T20:34:56.855226Z","last_seen":"2026-08-10T01:17:43.539568Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2077,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:12.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:50:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 582\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4458,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"6333e839352933a58f909755477b9aaf","sha1":"3c2f7e8f9bfc19686f6c315e367cf7fdb482c78d","sha256":"1e91b6fe4d480e22497b684271105eea7eb2b93152797e15926061b2c84563fa","sha512":"ae36a5f816ac92466c2a63bd65576b7434bba909fa91f14520b88ef4af788399e75999d1868dd8500faef194ee6cc84498f636a8e81df7a5e08c639bf32514a3","ssdeep":"96:ka07wsAKuuGLriLDzLiGLroLDzLOG1raLDzL4GPrKLDzL8GfryLDc5PLAGdraLl9:d0oyGLOXiGLkXOG1WX4GP+X8Gfmk5zAd","tlshash":"ab919cc0fe7d4296a966379365ad60d9299c1439c89320f3f1fa26244a9cb1f217e91c","first_seen":"2025-04-01T13:06:23.867241Z","last_seen":"2026-05-27T01:35:41.512662Z","times_seen":22,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:12.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://virgogoldonline.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 May 2026 04:00:24 GMT\r\nexpires: Fri, 21 May 2027 04:00:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 509688\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-12T11:46:02.957784Z","times_seen":33472,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:49:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1069\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5150,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5110)","md5":"94a21f72bcb0f587b1f49693de276b22","sha1":"1b46fbda5a7c423b38a8519b70738504de76c1d6","sha256":"940db7f216ec61e3c43a56ab44c3c82eda0eb9d32005c0ea187ee4f16220f1b6","sha512":"68f9406c96f94cdbb47b79f519fc4f34fd8a7b55ae7bba9b8244258670ddb60a3ec6794488b3ef95c683cf567ca6300acebe94d14d6ed66d7b68bf6687466761","ssdeep":"48:BiUDoWozmcbWsiYPt3U/vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eoL:Bfoz/WkBUHjfQL7aFu2if3Jf9HL","tlshash":"24b17750be4f9586721f002a0993f309d05a12c5dc8c6f78f856b16e59b6fe43a73eb2","first_seen":"2025-07-22T15:49:24.315723Z","last_seen":"2026-08-12T07:51:56.343394Z","times_seen":1560,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.30.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.30.3 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:49:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12380\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59344,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-12T12:17:03.672681Z","times_seen":112146,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.0.4","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.0.4 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 22 Jul 2025 13:59:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4291\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18215,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (554)","md5":"2ea167534bb1bb8c0471f464b68224e4","sha1":"b5c33aa343eb16ee284e11165a2d2d42ace2bd36","sha256":"10e28fdeaee6354163e573661ef553854ef23cf4fb8e39107dbc07a2514a7778","sha512":"3337a0b249648fe44056caa6859da83b1c67c3852c95adb8b8b65a85f86bf1439d32899a3d735a201c595c847e15038e0337cdffcb41446acbe9f932e061149b","ssdeep":"384:XCxrlOkxR/iF/iiMg5iJfiT3iFQJklrzKCQy64+/ibfiw3i75iVfiW7Bfij3ixgo:arMUR6F6zgAJaTyFQJklrzKCQy64+6bz","tlshash":"b882dba5fedd562c00e512f5e56a42c9b42c5432f806a89d3e3cb4f48ae0fd78cc5a5b","first_seen":"2025-08-04T06:39:35.825104Z","last_seen":"2026-07-13T08:07:56.92939Z","times_seen":20,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.30.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.30.3 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:49:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14422\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48393,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48352)","md5":"f3120f503a07296ec70c204ac4f02b93","sha1":"bc4e010d9496099695d3a8c201fca0464e322177","sha256":"4db7f8317e6c69c1c393671a9ef8faa76ad4a8d8a8c8c426a5d0f9e2d90d7d97","sha512":"1864b40fa1c7c0ae304c9fa84c0a06c8cd92c18118a91efe1f98efc53ac8b3c7d4cb437e00c73ee85aa6010e402cb7be4e8a94150070c5e5a5731df19f3730b8","ssdeep":"768:2eAjA6wk9C+QioJHYNQAzeLHeBHmjkSK7+z1hlN14cR8+AvNKRiA8m6XS3gzlAIT:2eAjA6f9C+QiSYNQAzeLHeBHmjkOzRNM","tlshash":"bc23c7853652f4f70beb40daa02f450af25619a8640df4d4bfe9dce19470e8e237ab74","first_seen":"2025-07-22T15:49:24.337517Z","last_seen":"2026-08-12T07:51:56.406229Z","times_seen":3093,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/funfact-counter.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/flexibank-plugin/assets/js/funfact-counter.js?ver=1.0.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:50:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 705\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2860,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a35dba01333828b46665aabc294ec744","sha1":"58908335b1b572107f94c2877a945b55890172e1","sha256":"00622cbb9b83ee156267bf55683200dedc15e4a28aa23d565455f80d7a3faab4","sha512":"86268a17ad37d8790cf25a45adb1b334badd218f79c1d335247550f0f2aded38f240f32c667ba8c8a90da07260163e42ad3216f4b020e36877019410ca1d366a","ssdeep":"","tlshash":"2951f1e0ff6d91e561bb3133645e22db649c5071c48360a3fdea81248afcb593939509","first_seen":"2025-04-01T13:06:23.864519Z","last_seen":"2026-05-27T01:35:41.535485Z","times_seen":22,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2024/10/help-1-1.jpg","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/help-1-1.jpg HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 23 Jul 2025 11:58:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 59148\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59148,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x414, components 3","md5":"4696ea2fd2adf09602d1be26ee690216","sha1":"f63210b088288af5f10b18dd0d08a3b6afac9e2f","sha256":"20aa81a897ca06bd744bd53bf97fc4fdf013f83fdc3b77bb2b1eea30fcff697e","sha512":"b7e3204306ec35b4274b1b9e79ed2c37ee4510087dada3e9ba4af51f09c41e92fcbc787b27ae42470038d7ee28c7dd700f0c779af0e8603889927edb97e34246","ssdeep":"1536:T7geo7w1Vr08Fz50OlCPVK9hp/WBRcsG5K+P:Hgzw1+gOPU3WnH+P","tlshash":"f2430144e1755cef6dec0f71fa20a20b0d949590dc5b8dfdccc916ab2249ca97b7a490","first_seen":"2025-10-17T20:34:56.664386Z","last_seen":"2026-05-27T01:35:41.53612Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2041,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.30.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.30.3 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:49:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2319\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5700,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5660)","md5":"6e419e77b7d10e0c0aaa242bb11d9b19","sha1":"6a5c86ad22a9685fc739a1cf2a6e41444e2d55b6","sha256":"75c9c014178fd157c4ff9f8cfd9067fc30d2d8432c729504e9a75f7aa8bb6123","sha512":"3c0baef186cf851218a8c23f4c6a4dc3adc0527e7fb916e0c274b5a811b55c93129089db4fdd1b707a066f637d8bf73378ffba75a3a40bcb5091bd5f3c16d5b5","ssdeep":"96:BrAtsNvDdfzjqj3Nhxl8O7AEQQ1vg+lsmejl3i7wVjLUVsc+2KBbZ7Qah88/2:+sNpzjq33NQWg+smeMs5QTY1V/2","tlshash":"24c172d41a94fc2b22e135d8e10b9734662fc0337c16f9c1fa21dce955e8ed183aa532","first_seen":"2025-07-22T15:49:24.312063Z","last_seen":"2026-08-12T07:51:56.317693Z","times_seen":3089,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:12.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.30.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 23 Jul 2025 11:49:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78196\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78196,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-08-12T12:32:20.582537Z","times_seen":165553,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":437,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.20.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.20.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Jul 2025 13:51:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2468\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5825,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5781)","md5":"32956574f807093aae94a21551640c54","sha1":"0bace9c120d16ab4ee70af5ba3b0e1cd6546732f","sha256":"194eceb3a9e55812f3883818c48dd0d9610de17531e94d0b82841fd32b9728c3","sha512":"a0c2b61162354084e8eea34ecf887662b661ef170d31ca602e700988c5ce80c0cb521d59eb33734016525a0ff6c26cc6444231a03577dc0ae04c0916e7a8cf71","ssdeep":"96:BI/2ifnhUwdL5MIGA6iZ20DTl7CKEpre1+Xz2x4Af094Mxbl26GVleVlAlvkbzgF:2/2ifhU6L5MXiZzTgvrxqCO094Mx/GaW","tlshash":"1ec164d91a549e6b26e03ad8b0975b701e3dd0233c29ea81e951eddc19f8fd083d9933","first_seen":"2024-03-12T09:44:33Z","last_seen":"2026-08-11T14:37:58.617756Z","times_seen":625,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:12.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://virgogoldonline.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34704\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 May 2026 09:28:46 GMT\r\nexpires: Fri, 21 May 2027 09:28:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 489986\r\nlast-modified: Wed, 27 Aug 2025 19:21:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34704, version 1.0","md5":"c501f578bf3fc800c20056df516ed9f2","sha1":"38c3847fadc85a32910d7442570aa7f96c4db540","sha256":"e9201eddf1d41d0b62253295d869ce3cf65768f7102b797f02c7f8c876b4a9d5","sha512":"5679059906db74ffd7a5a3411e9dc2f23ac99bf7e4a770aeeaaa2e333edf5884d0b73a77ba23934e5d2c70cae0360ef72d09bf751325ad6f65d27a4e58d48201","ssdeep":"768:xlirkELnno1hXzn/AAfuTLFYVCo9gV9atOpJusC5X2zTsAyaM://Ejno7XzA8uP6g4VtOHU5mvsf7","tlshash":"b2f2f2d6d7b0168ede64e8a7c18d301745c5793489c7a97822ef5eea4278c580cd0afb","first_seen":"2025-06-02T04:49:13.271182Z","last_seen":"2026-08-12T00:40:04.103799Z","times_seen":1436,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":286,"dns":1,"connect":61,"send":0,"wait":83,"receive":28,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/3MONJtp1c6","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:12.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /script/widget/config/3MONJtp1c6 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://virgogoldonline.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 704\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Wed, 27 May 2026 01:15:02 GMT\r\ntest: azazaz\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: STALE\r\nx-cached-since: 2026-05-26T23:15:02+00:00\r\nx-node: m9-up-gc57\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1382,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"89bdea695496666a366c43b980b1cf07","sha1":"d5723ba577c9a4f4f27b9c43fa663b15656e8354","sha256":"e38bc3c8301279e07729bf3236e95afeea58102344a18b4b5597776cb94b8b38","sha512":"882590c9a1aff1d53193a4f78e53af6491ae5947c4dcf9c1e53f92a520b191bc242f4fa0644828fccb4c93dd6a1965c3e91cbb0b8fcb9ea213da257282da3a07","ssdeep":"","tlshash":"692153f64c98586b0d857ec7a11bae07393c82a3ee814e71dbd89c2c11a23d5131760b","first_seen":"2026-05-26T18:41:55.829356Z","last_seen":"2026-05-27T01:35:41.539825Z","times_seen":4,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":193,"dns":1,"connect":94,"send":0,"wait":164,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1753289190","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1753289190 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 16:46:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 710\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cf51ee80f73637095b8f471be1b9f10a","sha1":"54e7cc48506efbc3c3eea03a158f6ad53ded135d","sha256":"d19d9fb51a04906c68bae3b1e899343292321904616db04d8acb68109f5bd77e","sha512":"fb66a247c3a491a798a18bad1ff323eee1bcbec3b1037838acb9ecf245b78957b440473bf96762617a1bdb3391d82b14a73c5b5d40ae6163569e6bb1cc3e6cf7","ssdeep":"768:bIPIDIyIoIkIRIvTHewchG6eHBdQRNJ42K/AM4JfjWzPrScw9amSrdB8lJNMiubv:sgkFjfqvTHewchG6eHBdQRNJ42K/AM4K","tlshash":"04b2fbd1549a010197874cc573cb7f25ac4d904af081d9ee8ffd18d8aefbe2622a179e","first_seen":"2025-11-18T08:18:58.767265Z","last_seen":"2026-05-27T01:35:41.540391Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/images/icons/icon-95.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/images/icons/icon-95.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1442\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 24, 8-bit/color RGBA, non-interlaced","md5":"e5c12b05ec129669da60e7b4bd915917","sha1":"a14a3f68d60f1ae3b1a17c64999a28c4935a21b4","sha256":"3ae5154cb4267276db3c74edb211b03a330b40e808bcbb83bd2ca96211a1598e","sha512":"77c774e6a324dd18d9b3ad1f9d0adaedf659249b23d55ec772a2ca5791e822805a41f755f2b076ee1621b079caeb46f24d71d62cccf842bb090b9c5d3eb1c216","ssdeep":"","tlshash":"a8215409d2809f42c694ce422df99523ac1ac990ced1f4f2fdcfe4165850eb6495d1e7","first_seen":"2025-08-21T04:39:53.335647Z","last_seen":"2026-05-27T01:35:41.541387Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/bootstrap.min.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/bootstrap.min.js?ver=2.1.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15506\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60104,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59825)","md5":"e6f488c5766fb06169100bdbd2b4fdbd","sha1":"f7365985962f78092d8eeaca6d6633d6fbf75583","sha256":"0ce9de398de7e7ec63e836b70090643c7c5a3f29ea4a519a67defdd206c13ac1","sha512":"f18f1e18af76773a2ec2944e229a70afed243dabaed2aaad9f365934417c3dab79b6e44d2712570a46d07c9d079541b7cb51c1df3d7c0922a6528ee2db370fa6","ssdeep":"768:KZYN+vOLYakObgUDZj8fW+l3sLaSLPe6CMhYVRK0H/9V2Vz/kq8GPnl+G/AX22b+:Kk9PXht8xm+Yx2UPnAe","tlshash":"2443a5563244b8330ade85a78136434bf7295c98b547806cb5bc6cde2b7dc863276bbc","first_seen":"2023-03-07T01:19:35Z","last_seen":"2026-08-10T01:43:08.461093Z","times_seen":687,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=2.4.5","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=2.4.5 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Jul 2025 13:52:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8154\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79733,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1646)","md5":"f9b1a38c6cbddba457610d9f7e0cc39c","sha1":"87e604f4d160e1bf8922d3e8544aa231a35137de","sha256":"22535ac164de118df829b7c354ee63ba5a41b4ea6ffb808350aa451d78edfaea","sha512":"2d1676e84e372b9262b7c92e3bd57d46b5205b5b4fd2218196bb92560583588b29bdd819b77ec5439c99be912489914a5d57f50e66b6114db2138094acc4c418","ssdeep":"768:02+Rm5ukW6EdVBSs+QXLjBnTGpIq5pbTpqzGI5eFV/ftc/yorXzFSSBlzfSKVn/1:02+Rm5ufoqDr1GLvQ","tlshash":"2573d8c61dc229749a16681da3ee93a457b60043cf35a9ac37ed821ccf82341b7f6b57","first_seen":"2025-06-09T19:34:43.416421Z","last_seen":"2026-08-12T07:51:56.309144Z","times_seen":4516,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=3.26.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=3.26.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Jul 2025 13:51:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3160\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26887,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (26842)","md5":"56879ffb7bc9ff4f302e8841383653b9","sha1":"33dca127e45afc8c1c06a48476f222b17b45ca39","sha256":"116a6500f2caf1cf20de26a1e00b90f8e91dd05eb3746883b2e499d3fd3a0598","sha512":"30ffdab3b39e92cd08d5bada7c993e0c9e559badd4cfe3081e598a231a2e78cb331c286e3ffe131c485279f2d0de0d131637517f427b64a877a737be3cb631eb","ssdeep":"768:vPoScoKTAllwvGQzKNwGz42lvQz0Ahm+PmBMqRI3HtCelEqJUrZgFw:zCw","tlshash":"fcc28981bed3592b032f613b91e2c61c4fa519c8b2a07699f0f5a00f41d7d4c6bb7b22","first_seen":"2024-03-13T16:11:00Z","last_seen":"2026-08-11T14:37:58.622419Z","times_seen":152,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/cookieadmin/assets/images/cookieadmin_icon.svg","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/images/cookieadmin_icon.svg HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T12:40:46.817109Z","times_seen":17855281,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/funfact-counter.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:12.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/flexibank-plugin/assets/js/funfact-counter.js?ver=1.0.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:50:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 705\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2860,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a35dba01333828b46665aabc294ec744","sha1":"58908335b1b572107f94c2877a945b55890172e1","sha256":"00622cbb9b83ee156267bf55683200dedc15e4a28aa23d565455f80d7a3faab4","sha512":"86268a17ad37d8790cf25a45adb1b334badd218f79c1d335247550f0f2aded38f240f32c667ba8c8a90da07260163e42ad3216f4b020e36877019410ca1d366a","ssdeep":"","tlshash":"2951f1e0ff6d91e561bb3133645e22db649c5071c48360a3fdea81248afcb593939509","first_seen":"2025-04-01T13:06:23.864519Z","last_seen":"2026-05-27T01:35:41.535485Z","times_seen":22,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:15.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 27 May 2026 01:35:15 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6a0dbb3c-1396\"\r\nexpires: Thu, 25 Jun 2026 23:25:26 GMT\r\nlast-modified: Wed, 20 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-26T23:25:26+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-11T22:11:54.750542Z","times_seen":16741,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/jquery.fancybox.min.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/jquery.fancybox.min.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2938\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13735,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13734), with no line terminators","md5":"35d290afd71a6053d8195ea13170b4e9","sha1":"a64676403bb5c23f9800963b0b8f0475b532601f","sha256":"e467f75601e845da217ae845b688b227a19fbf1e8fc776a42a4905869496d2e2","sha512":"0136028681f47450835a9bd6345bb647c95f2be3e963980e5b5e355f3cdc602772313640c5d9b72ae71252bbe8099b11de5663f3fde49b71a5170e42959f7788","ssdeep":"96:tGA07/mPQRZa6f3sNGzssDH7jGSWWf8+WDJT53RjRuCicfMAJpEbyZh5fN2WdZ:tVQfXcVa7KWdMT539MCeAL55fJ","tlshash":"b0524e63a140311c903bce21d7df8948e279d55266221affe68cf919cbc7be912d62c6","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-08-12T10:36:17.548786Z","times_seen":7153,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1753289181","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1753289181 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 16:46:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1873\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":107892,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"424186474ba4b18079c12608b11b33f3","sha1":"95cfc910dbb739e53de02e20cc5e2386e31f0069","sha256":"b434d91bdf720fac6a2302827fbdb2e85b56f8cda41884aae4086d9d08af63fb","sha512":"45944881836ccb4a007a84671df3d742dec29db2eaffbedd596f663c472119524bad70119e957a51387677c214a9b07be0d4997623b02d238efac04a7c55710c","ssdeep":"768:yWk1GhBTKggjA2LGyStSM+3WuS5pE9kez40L3jDcpND69jj4p5rWFPl:FEhKHAdmDyrMxCv4V+N","tlshash":"3ab341a204170101935748d233ce7e28fd0ed216b544d0b9abfc5b5befebd6522a935d","first_seen":"2025-11-18T08:18:58.883239Z","last_seen":"2026-05-27T01:35:41.547931Z","times_seen":7,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.30.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.30.3 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:49:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3987\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26702,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-12T12:17:03.647195Z","times_seen":88118,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2024/10/icon-67-1.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/icon-67-1.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Jul 2025 11:58:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1593\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1593,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 32, 8-bit/color RGBA, non-interlaced","md5":"1e7681033a72c8853bb034b4b3501f5c","sha1":"569bd86979ea5716cd3d75a9c4da4eec01de70ea","sha256":"50d0df11342074cbb97adcc2f3b9918de7892e32c1c6d797784b20b501907697","sha512":"0663435587f27a3b157d2f8f40ba3e66dfbe21d53ef1c9077bed0a1f19022ac9ccf6c6aa6d5ccf5c9413df76554012804da543c2878135bf7852faf3de95a201","ssdeep":"","tlshash":"7b31a65afa56ac01f88ccdc358f261039e155980c499e0f1cccebc3265302b6259aadf","first_seen":"2025-10-17T20:34:56.671864Z","last_seen":"2026-05-27T01:35:41.549043Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2082,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2046,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2024/09/banner-4-1.jpg","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/banner-4-1.jpg HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 23 Jul 2025 11:58:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 180604\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":180604,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x817, components 3","md5":"006b05d74b04f39daa2f83f7ea199907","sha1":"94312a69908e354b66fb869c434fec1e2ccefc1e","sha256":"c3a0ee27885f44f877d04be1754b52c025a055d28d28e41c70fdcd77c3aaa386","sha512":"b2292e157cfae871cc7ddbed249c02b152a2acbd0eea6f4083e0f4d6579d6725358b129e7a57909922cf7c5c17989e2b836a9fd9b0aa77e585b3926b5a953cc0","ssdeep":"3072:1yasNpnmd8S115kJLP5PwSWzK2ejdidXLbovvMGlCBA0itPef0N8ZmcMKkb5n:1ybpG1vcWXWm6vLyAlty0N8ZHMhV","tlshash":"fb04028c704502d1fe18aa6eba70165a5f7422a6b928b8f13cf5d5fb579b4187cfc083","first_seen":"2025-10-17T20:34:56.759494Z","last_seen":"2026-08-10T01:17:43.469616Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":971,"receive":494,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/fonts/flaticon_flexibank.woff2?8e956bd10ab82df756eccf21dfd64b3a","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/fonts/flaticon_flexibank.woff2?8e956bd10ab82df756eccf21dfd64b3a HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/wp-content/themes/flexibank/assets/css/flaticon_flexibank.css?ver=7.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 23 Jul 2025 11:48:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2296\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 2296, version 1.0","md5":"953ea9b732e9e3c8536adbd41d6bb390","sha1":"16cdf00c73911c4a435fa4c47858701cdf139741","sha256":"9f9bf1181824e40e5934a287d7ce70f13383b29e07471ade05fb678ca6467232","sha512":"82a775a7923dfb0155c7f8008f93879ef361b80208753acd0b63b65f1630bc3d1b3067ebf5ead3e1a13e8663d3247bf665b2788550cd63655333aa4fad4ff04a","ssdeep":"","tlshash":"d7411953934a4839ced5ccf685b92b3b262c054918befb0ba1a403c860e84d842999e8","first_seen":"2025-04-01T13:06:23.820107Z","last_seen":"2026-08-05T22:51:29.93191Z","times_seen":49,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/font-awesome-all.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/font-awesome-all.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22940\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":140738,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"a7aa3f8e45fa05eacb1611ba122bdd20","sha1":"dd6a2c18985e95f4014b88e04b6a5b4451d998a2","sha256":"ac338b6f307e6f362709830d571e2ace3d3e01d2334f9ae597e1e9707466db44","sha512":"e657152087446da8f3a8977c42771b841c1ca1486c14e7718ab7a5c8b38df1440ff7e029dd0d4c5105300a453252bbf8c22aaa76ff84a4b79985013c559ba1f7","ssdeep":"1536:icmSm4mSmKmSm/mSmHXmSmumSmymSmLspOUB7WwHFJeJsEypx5nOxdFnYn5+Wqh+:VPB7WwHFJeJIlgYn5+WqhoFazvPW","tlshash":"33d376fad0ff10d48311e0892647e3a4b739b62c9c4a4c58e2a67d8de6c165cb1c6bdd","first_seen":"2025-04-01T13:06:23.824627Z","last_seen":"2026-08-05T22:51:29.942062Z","times_seen":57,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/bootstrap.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/bootstrap.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 26669\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":237872,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (560)","md5":"a9da636389978eda7fecd87989ca6af3","sha1":"45a5c65611e0c0dedcb37d89524eefee97c91919","sha256":"80118526fd24ec4d1565d647cb22cc03963779ec8b7396992d9449bab9bcd9ad","sha512":"875af0174b81eabd88b8465cca33eb479ddb04a37d59be322fec3745d97399cdc290117580c485bd0208b2d9eee1b12d60368a71ae647b94bc501000091226ca","ssdeep":"1536:fBK5SE0/geRhzzT7K3HHnC9Df5E9g1YSN5g1yl9SB5/k7uptIjNbPZb:flgeRH7uptIjNbPZb","tlshash":"1c345458fdf12828387b9259649abef9bb7c5082c60dcd75b5d32224cf893d15ca29c8","first_seen":"2023-05-17T20:54:23Z","last_seen":"2026-08-10T07:27:37.946775Z","times_seen":182,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.24.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.24.3 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:49:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 958\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10310,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10270)","md5":"9e9ab286d5fbc6da7d718fa618f5eb3f","sha1":"7910434b11e94b44500a753b254769bceba43ef0","sha256":"bb133cd547c6b96b6e18a0429494ab61372524677213769ad79334a55dc85a74","sha512":"a54376188d500dff8f395b3a6e3c7f348ebaacca95b01842ed387c72bf8b4478c7f4f48d8316b3a25bcdce1b73117b80552ed70b1c40254712e8285e7de7cb68","ssdeep":"96:B4HIoZKM9wyKI/G+tl+A0zbjiviRILvW6kjO6AHReKuLjYvcv5VA0:WHIoZK6G+tl+A0zb+qy6AHReKuLj6es0","tlshash":"7a22d4817d53814e1aff641b141b284ca1d9d4cde9bbecd5e8a66203c6fbec53b31928","first_seen":"2025-07-22T15:49:24.324916Z","last_seen":"2026-08-12T07:51:56.349686Z","times_seen":1631,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/elementor/css/post-7.css?ver=1779612082","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-7.css?ver=1779612082 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 24 May 2026 08:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 339\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1229,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1229), with no line terminators","md5":"5b595e7fc49c417e4336c13237326b1b","sha1":"10a42168374062e41614a6f3918c792e40f7010f","sha256":"e9b6ba625e4f651ccca3d798b255de6061b83dd0ab5e9901c0792664eaa5cace","sha512":"429b533db48f48b60ab57a26c86c0474cefa138d9329b78fff28e6e6d50c3e41516884aeec12a85361e0a2b3f1ac7b8cf02787de1664b4a13083107806118c61","ssdeep":"","tlshash":"a62124457a23d426e07b092f91c3b02c112cd45fa25f8adff41d9649f9bea4a2228643","first_seen":"2025-07-24T06:16:00.33239Z","last_seen":"2026-08-12T04:54:17.462943Z","times_seen":476,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.30.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.30.3 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:49:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 254\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2448272a337dabe2d1e4763ca0ac0da5","sha1":"b6af47916d7a905a2612d41ac402fe39fb22b6b7","sha256":"361e951df6ab08602597fa0baa9a4b8bd0047a210709358b2887b53e26d6ed21","sha512":"afa5c352e123e6d0ab28c9944a0fee2911fe1cd8c7926867339efdcf4c65fbfdb6edb26050ba842c10b58b026d8a56b9a59a0cee6361a00a4fa818e40bb7e4e7","ssdeep":"","tlshash":"c0d05e4078674382301f596926ab2a9e78c01ddce246cb90eca166125abacc83372120","first_seen":"2025-07-22T15:49:24.314015Z","last_seen":"2026-08-12T05:08:31.230028Z","times_seen":2627,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/odometer.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/odometer.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 374\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3038,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3038), with no line terminators","md5":"5a8afb3e584415473c1744609d78b129","sha1":"e660357f6f4854028b10790de9f69057d7244c51","sha256":"d2d72bf86ad852196bcaa13111c08bf5b778a66f665ad85539751851d7e47e5c","sha512":"5b22c822f67a8ff047e132441934225281029ebda5e63c049bb7fda1eff1572b7ea96040ba1de37c1ce317ecb46862228d41c30cf30b311ab8cf42dbb3116cc3","ssdeep":"","tlshash":"7451d0154f91136863367506bac81b60befce9015223e98e735da54bcf43db9e398b0b","first_seen":"2025-04-01T13:06:23.839982Z","last_seen":"2026-08-10T01:17:43.530044Z","times_seen":127,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.34.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.34.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3989\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21172)","md5":"f059008c0fd67da941f3f30806045d5e","sha1":"b3219e8f2bd604d59a0a0ad2686114ca6ac616bc","sha256":"8cc9ca750735b87b3efe85f8fd9fdd44ad2b908bdd3744812abaebfe055771a4","sha512":"77ca8022702e3ffc66112a3cff3f6f1b62f679ac393fe6a12617a87e4d538bfbd8d539a32b51b2ef57a170d1af34129c38a9e0ebe3b7f9f90475d741c28e5a6e","ssdeep":"192:Fx9877iN3iCOy2bvGIdpJkhugk8/H6qiMs7HqnFTSZq7RXDlCdkgIYSN:i7iNyqEpSk8/aq8uFucbrgIYu","tlshash":"3092dae4e46923c87b32c413e744f64c64daf920cac99d19fa6f850c1de16a31686fb8","first_seen":"2025-06-26T04:56:06.540185Z","last_seen":"2026-08-12T07:51:56.306081Z","times_seen":11534,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://virgogoldonline.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34704\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 May 2026 09:28:46 GMT\r\nexpires: Fri, 21 May 2027 09:28:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 489986\r\nlast-modified: Wed, 27 Aug 2025 19:21:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34704, version 1.0","md5":"c501f578bf3fc800c20056df516ed9f2","sha1":"38c3847fadc85a32910d7442570aa7f96c4db540","sha256":"e9201eddf1d41d0b62253295d869ce3cf65768f7102b797f02c7f8c876b4a9d5","sha512":"5679059906db74ffd7a5a3411e9dc2f23ac99bf7e4a770aeeaaa2e333edf5884d0b73a77ba23934e5d2c70cae0360ef72d09bf751325ad6f65d27a4e58d48201","ssdeep":"768:xlirkELnno1hXzn/AAfuTLFYVCo9gV9atOpJusC5X2zTsAyaM://Ejno7XzA8uP6g4VtOHU5mvsf7","tlshash":"b2f2f2d6d7b0168ede64e8a7c18d301745c5793489c7a97822ef5eea4278c580cd0afb","first_seen":"2025-06-02T04:49:13.271182Z","last_seen":"2026-08-12T00:40:04.103799Z","times_seen":1436,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":308,"dns":0,"connect":50,"send":0,"wait":61,"receive":55,"ssl":259},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/color.php?main_color=0568bf\u0026second_color=000000\u0026ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/color.php?main_color=0568bf\u0026second_color=000000\u0026ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.31\r\ncontent-type: text/css; charset=UTF-8\r\nexpires: Thu, 27 May 2027 01:35:10 GMT\r\ncache-control: public, max-age=31536000\r\nvary: Accept-Encoding\r\ncontent-length: 74\r\ncontent-encoding: gzip\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"27e6311c756bb193a64c6500ba7d6873","sha1":"494968507bbe3707d5f318ab2440376c8b6ac652","sha256":"2502e1669c2722d4aec26861fa364a22b9e075cdade308c577018d3b5ddc2c81","sha512":"a7c52ee770a73e84aa4e670a50dae7ae10864672d752b77f01fc9f2af0f369a6bf8de23e78985390c7c98e6031f629f44e5f2a5f84d4c942a97a243397a71b5e","ssdeep":"","tlshash":"32a0028de0739256e32705393a79b927db04b8c4aee47b17f0c5038a549c0216c3d9ce","first_seen":"2025-11-18T08:18:58.790932Z","last_seen":"2026-05-27T01:35:41.555167Z","times_seen":7,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor-pro/assets/css/widget-blockquote.min.css?ver=3.25.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-blockquote.min.css?ver=3.25.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Jul 2025 13:51:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 950\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5193,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5147)","md5":"4a6ffa4d386d7c60f84aeb0880d63172","sha1":"938382917ab5cd13b75eae694ffd123d27fba0ea","sha256":"2d182611b22bb174cdfb0ad673350e1d8f4bdb41ddb3b2793178f54a4a1d3faa","sha512":"d375fa8b9e13e850a6a0247036d2a606bc50753e3c1c2961d3593808f7ca2baf45422afbc3c5e45a4448159150c4acb7a29d39f6f8b8df2432eb6e900745aea8","ssdeep":"96:BCTusg8szCraJY73v0LXNh+AtVr/gLlNhjUX:xX8b2J2fKXNh+AtVrYLlW","tlshash":"39b18c9e786762a9035f820b6c43e0bc615055c4e88233d0ec76d14bf5e99f827e67ab","first_seen":"2025-05-07T21:43:42.672712Z","last_seen":"2026-08-11T14:37:58.659998Z","times_seen":63,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/images/icons/icon-88.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/images/icons/icon-88.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Jul 2025 11:48:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1279\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 12, 8-bit/color RGBA, non-interlaced","md5":"5eb5de44704bd41c2205380e63eb4899","sha1":"c2d66c3a6d08bdb2fc340b8abdce1702059e81ed","sha256":"74623a8cde11cdec7a31dd3134750af4076a64caedc2abfd62d7ec98fa9f4636","sha512":"ffa7fddcf861de56b2ff181808c3b327ce029ceb7045ba5fa6c698144eabc81b1bfa3f631bdb2fc4f6c3d3aee9b3d5ee95797403c18537412d099804e1068dc6","ssdeep":"","tlshash":"5321984df1476e41814dddc33cf2141765524490c5d4e579a8ddd4a326302f784de5d7","first_seen":"2025-10-17T20:34:56.793528Z","last_seen":"2026-05-27T01:35:41.556716Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2087,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2087,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/images/icons/icon-84.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/images/icons/icon-84.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Jul 2025 11:48:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1740\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1740,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"7086bf64c03fa232eef6a9cc3f6563bd","sha1":"6a59cbf1a36c9edf4cf831fbe33bbf5bbeeaa47a","sha256":"7d3669d6a85dd37312a247c01bc6620322976bc6923185308499435425c0ba05","sha512":"8a73c5f14a92a10ad8fc0c215a1dda8f43dcd73c3ad47163c91fe4294809a74f5bcfa3fcb94a02d02e4e06f39a0dd4bd09b1819fe0305f8aa81f8738b4fda901","ssdeep":"","tlshash":"7d31e646e1047c81e24cd9021dfa0022af0787c4ede4d121a8cfd43746e47b465dbae3","first_seen":"2025-10-17T20:34:56.621682Z","last_seen":"2026-08-10T01:17:43.543145Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2042,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/odometer.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/odometer.js?ver=2.1.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3374\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9896,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9874)","md5":"519a5777444f5965b6df23e26c69f037","sha1":"fe5beb60997c84ab2f91b54535c4221443cdd21f","sha256":"03c1e188b884240e56a79c39b6918e16e9cfdf9b4ed4e84d5d8efe71fef778ae","sha512":"3ee200bb01031ea959bad625e2294fdf810b5a3d667d8c69330780be938c2a07734cf3a6c42b942bc9b28142c1e1d2787a835c1afd16089eea2dc9dccda29f83","ssdeep":"192:xABzlvk8QecC6AOcu2flRdI5s/GMjXuu/T:aBhvk8QecCa07z+Wd/T","tlshash":"80129580be02a725875371e151bf0709b7bb99ae6404401df67c9cdabe25c38e12bf74","first_seen":"2023-03-07T01:14:43Z","last_seen":"2026-08-12T06:09:36.226839Z","times_seen":1584,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/script.js?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/script.js?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2318\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9573,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a8423d9aabbcc361fd9cb67125a67d8f","sha1":"013d060cf0c23b15e8261d7d0150df2bd69b251f","sha256":"82e9ffe8c8d4fbb482ae53d6b62146fbdcee80d3e6f07fe2f3d9fbcd9fd9100a","sha512":"f10c970490f8b4899330ec3319d421328b3a3aaf97557f418d2f55158971b762037c5438cb297de2b526a9c5064a7edc71339b475d794f84803dab32f11f6103","ssdeep":"192:rx92EFcaGyBbsP5zrUgySQl5iiP2GlNJrDTaPU:rUyFGxrUEQXiieGlNxaPU","tlshash":"ad123e94f3bc66a2107f3129941e66c5373d50b3c6824c7bfcba44682fd53a876a1d1e","first_seen":"2025-04-01T13:06:23.872229Z","last_seen":"2026-05-27T01:35:41.55902Z","times_seen":22,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/metform/public/assets/lib/cute-alert/style.css?ver=4.0.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/metform/public/assets/lib/cute-alert/style.css?ver=4.0.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:51:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1064\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4719,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4719), with no line terminators","md5":"69fd617ec4e7c36927f85ca08e1a3565","sha1":"1b6d4c84780811e03db9d51b464ce395409dcda9","sha256":"1f67dd841149cbfe504b72c309b4236e864341bc610329302fe2616ba5679c57","sha512":"822487e694e9e6695560de5b632899e29aeda7df53d22e1bce45fbe81bf5a25cba92cd1c08870269cbed28acc2fce46916e246ed1e41dbeb817f875d415006e4","ssdeep":"96:bXyrGUKf2hI/Q6C3JsfAeTlGeks985GeksK5GekUzaLGuJ1UTcNotQ:bXyrGfff/Q6E1IEDs98gDsKgDUzaLFvB","tlshash":"01a18521959a370df533d8d279943be6601cc813e2a34abaf555367ec9c32970ef2788","first_seen":"2024-05-08T20:43:38Z","last_seen":"2026-08-12T10:40:31.71892Z","times_seen":8236,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/gutenberg.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/gutenberg.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1043\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4597,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (488), with CRLF line terminators","md5":"2f6683192947eb256bed3b90a97ffbaa","sha1":"dbd55e198702886cbc0fd5ac11f97f3f43dd39c1","sha256":"fd7ae957fcf6bdcc02ca66cf80cb91be23ff51590ffd8ed78b3ed07be82b27ec","sha512":"2eac83f6524deab16a8d56622709d3517fdad6fb42adeed27f642f28fcaa910e717f3681b66e7a07302e00714a8aaa366d1f501216010932b9355521d6af0344","ssdeep":"96:7OHt+zOXcDBjaj6v3fy0d5RvpWWeoDAQBge6jb/Q:7OHt+zQcDhe6v3fy0d5R4pokQBge6jU","tlshash":"e391df2da7b59cee6a5f57288ff966d8b98814c0ca5983d2f401f190f50cc992db1b0f","first_seen":"2025-09-01T14:41:26.371546Z","last_seen":"2026-08-10T20:39:16.471512Z","times_seen":43,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2025/07/golden-abacus-with-chinese-rmb-gold-coins-as-background-1-scaled.jpg","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/golden-abacus-with-chinese-rmb-gold-coins-as-background-1-scaled.jpg HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 24 Jul 2025 06:16:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 499650\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":499650,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 2560x1706, components 3","md5":"3638e4d007ca9894d91917ecbf169391","sha1":"cffa41ffd613be5eec708dd0ba540bdcae3bffca","sha256":"3f02a55b55234ce1454418740641b8ce142c83adb0f5f8e47a39c119cf2d95fe","sha512":"72a55f345544283ef7a90f71f527dc757ac405aa829d093aff332f1c838fde12e0e1b0a3377fd21c81c60467a14d9ed8255436e8351014d4c2a868180c2b14f2","ssdeep":"12288:ckct8XzUCNJ3P+7fz6EnkXhbWydKuRrAUT3X7CMJghxu22Lx:c1t0zTP+7fzdn7ydKuRrL3DsxuDl","tlshash":"6cb42390ac3e45cc863110af5bca1340f1f7af54b600a98794fd8d56a4e738d97eb917","first_seen":"2025-11-18T08:18:58.828803Z","last_seen":"2026-05-27T01:35:41.560955Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2056,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4008\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13452,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-08-12T12:39:33.52481Z","times_seen":234052,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.30.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.30.3 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:49:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4042\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15073,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14886)","md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-08-12T12:17:03.603774Z","times_seen":72875,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2025/07/virgo-new-what.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/virgo-new-what.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 24 Jul 2025 14:42:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3155\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3155,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 37, 8-bit/color RGBA, non-interlaced","md5":"028282d49b8f70540d6f8501aeaad2d2","sha1":"496faf891a8bc9f12d44eeec1a1bc2488aa4aebc","sha256":"bfabfb9d7d76ac5284a53ce4a4317c2ff3c5ece4631c0cce2014ea869f9e7eaa","sha512":"ec4059ee09b6ab8a65930a84f6e6d5b48b59626823c500b5e26d28f42602bd72535d39bd1ea4f262bc25789c148123f34a971f5f54833d0b706d20e37147a087","ssdeep":"","tlshash":"ee515be54a04b4ee435a95b3f8a86f4ee03e88842116f409c2b2a323307d7a909961b3","first_seen":"2026-03-18T17:02:18.207759Z","last_seen":"2026-05-27T01:35:41.562627Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1179,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.0.4","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.0.4 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Jul 2025 07:49:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 880\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":880,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"71f548c3ee194fef79fbe994427b112a","sha1":"be599c3fb242911ddabc433b16ad485d4dbbb251","sha256":"2fae8ea6e8f7a8d435895a186042216e7f845d89003d9eb5054a3be9088717e1","sha512":"790e762d49827e019ac373ae707219f5748d07b9dc0e86897c1e226547c7b7c718dc10531b3c39d6f97dc92b38b9001a28b154452f60e606306d5ed12057932f","ssdeep":"","tlshash":"3b11c881fdec4e6912e120e0ca2ba4047449b821b444cd1d4a3460eaafd0bdaacd0b5b","first_seen":"2025-07-22T15:21:11.533016Z","last_seen":"2026-08-08T06:01:39.416364Z","times_seen":796,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2024/10/banking-4-1.jpg","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/banking-4-1.jpg HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 23 Jul 2025 11:58:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38990\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38990,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x200, components 3","md5":"d9e15a297158b74b356f57b50dadfba4","sha1":"f2a11ebb60ade957c30c6cba81801c72650aade9","sha256":"5aa3ad54fd896f640f60a6739b6716d4fae1d0cc097f4c91cc739ad045b2396a","sha512":"ffd6c2e5a1d67261eacf5a3e1e955884d4eab83fbe254b40bacdcc45fed773748d43d539f75bebcc69fccf46cecac025bbf7792a46811a960e652041c715a5c9","ssdeep":"768:UGutWta9pRZhhMFCcP1VVB9tmROVnebIFGug5FkUUyIwuDZTRe:U90IpRrILNUcIVgtRe","tlshash":"0f03f24d9d53ad3ea0c899f48009c94f843ef285f0e75a7a60818db374346a7d6c69f3","first_seen":"2025-08-21T04:39:53.373269Z","last_seen":"2026-05-27T01:35:41.563769Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2091,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2041,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/cookieadmin/assets/css/cookie.css?ver=1.0.4","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/css/cookie.css?ver=1.0.4 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Jul 2025 13:59:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4334\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17877,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"c236bbef43df14fcb1f5b93ea198eaab","sha1":"09be307c9523d6c6e907bddd4e4ff5713ff3d446","sha256":"23ed62e27c1fd1e2bc05aacd09536823226c169870710a2871cbfa7a5cc537c8","sha512":"9f0b69413cb00bf6b513a9ef54123e12f24364c95e0ed288b7e4a85aa19ddabf965232f67367c105d2a73155a154d4e69e505de0385f88eec583be6525c0be87","ssdeep":"384:F/xuE1twtP2H2N020IevDBQYviNtLm23B1Z2z9o+2J:xxuE10P2H2N02GvDBQYvi/i23B1Z2z9y","tlshash":"088275263d5c664da21fc0d4fd94eb46562e4191fd0e0e6e76b2387cc2c86d60ca2f9e","first_seen":"2025-08-04T06:39:35.812637Z","last_seen":"2026-05-27T01:35:41.564453Z","times_seen":12,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Hanken+Grotesk%3A300%2C400%2C500%2C600%2C700%2C800%2C900%7CDM+Sans%3A300%2C400%2C500%2C600%2C700%2C800%2C900%2C1000\u0026subset=latin%2Clatin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css?family=Hanken+Grotesk%3A300%2C400%2C500%2C600%2C700%2C800%2C900%7CDM+Sans%3A300%2C400%2C500%2C600%2C700%2C800%2C900%2C1000\u0026subset=latin%2Clatin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 27 May 2026 01:35:11 GMT\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17580,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"15e722c61dd6dd27c115abfd24a215c5","sha1":"14182427287882659696a26e42297e8057b88986","sha256":"52589de74c4ed32c44d4f575c394cceecf2fbab1119209f269b31ba1113307ec","sha512":"8d6c6345d475e6fa771d8f836e4abf6891dfcb301e1c9bc56b97168afe9011ade86cd2383d4a23ff5c886c52dc3c74f26aced8bdbc76d5889cc53a0476d639f9","ssdeep":"192:57wY7+rwo+2wx+pw++kw3+PwM+qwF+NwC+WKy5aoc8YoKyQHoc8hzKy7coc8uKKY:5hKyoO4qwuzyeyIyCywymyIyN","tlshash":"db8221500867a554ab931cc622debc32ee0fb20470444936bbfe288dec67d7a5362b5d","first_seen":"2025-11-18T08:18:58.792115Z","last_seen":"2026-05-27T01:35:41.565088Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1156,"timings":{"blocked":520,"dns":0,"connect":60,"send":0,"wait":64,"receive":0,"ssl":510},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-12T12:39:33.573774Z","times_seen":930103,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 21 May 2026 04:43:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1712\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5015,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-08-12T12:06:08.640498Z","times_seen":37847,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/appear.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/appear.js?ver=2.1.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1234\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4379,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5a457d262e3c32d25c003ca412ee7fe6","sha1":"b08e23c986259073419a7068fcd36296a91b1ae4","sha256":"46fb2235bcf84086a9b939ae509ecacc01bb31c68ba94e6473e31d8adebec3eb","sha512":"826945d028efc7a9f95c22c5f4d34dfab6704b75f45e7d6fc2e93e2b42f7078aaf7b8508f9155b36dd15ca759a765fff3b4550f17e3b187e79285f63de455d53","ssdeep":"48:3l3Xwqhd24ayV+zFLAPftUIeohhR9zIreFfFoBSxMEh1u1cq6KjD4W7j9:V3XWz1zFkmDo7R9cr+YSpTocqBksj9","tlshash":"7391db4a759b2ab54877722a9f2fa20cd721513b1202c21138eede6c2f71c50a197fdc","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-12T06:28:00.708299Z","times_seen":4212,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2024/09/banner-5-1.jpg","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/banner-5-1.jpg HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 23 Jul 2025 11:58:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 311131\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":311131,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x817, components 3","md5":"25a7c0db5a2fde10942a1b175d61ba6d","sha1":"8bd9a96fd7565280e0890b2a5300b68dd5368c66","sha256":"fdffc81d8385b56996d6b5dee58b9d0d6881f995576b1af7bee46d3cbe769729","sha512":"189e9ad5f2b5a78d612d930f0626438528f286af9e6e2982456529a514f798a668023a538a15214342ea7bf9a890e447e9feb65425292f4cdd16517c48179a63","ssdeep":"6144:CjFhxSiUNf2msmOf6HMdrYBjfvUIQZsd+0kO1EH6bM:cxKfTOfvdrYLvFQZ3P6g","tlshash":"c864237b06f3a71b101da364a3d303f8e0b61c4e9855e81ffe90d912d9d49bc8969b78","first_seen":"2025-10-17T20:34:56.627419Z","last_seen":"2026-08-10T01:17:43.494283Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1058,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:13.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 03 Dec 2025 05:31:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4949\r\ndate: Wed, 27 May 2026 01:35:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-12T11:52:10.545959Z","times_seen":310945,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/style.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/style.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 941\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (511), with CRLF line terminators","md5":"6ad5b82234af15edee741c6d37251a51","sha1":"a243f17b10d8e90a6397906eb574e5d7e060a27c","sha256":"b15c45ce89e4e77e1bd99192eb0e0914007eea2486d45db2c904e8b9079016be","sha512":"ed56b18538dd4dbfd10bf9915059378f298f994ec73ee5e2b6cf59159ae92d252036627f3dff5846e818bcbb637166eaa99486a78a80c79e2c6cd8d0855677d4","ssdeep":"","tlshash":"1641a608a70a132e57930b0297ba6727ef1647e5a3cf50edb08d811ce254379a7a269c","first_seen":"2025-11-18T08:18:58.889407Z","last_seen":"2026-05-27T01:35:41.5693Z","times_seen":7,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 21 May 2026 04:43:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2330\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5697,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-08-12T12:06:08.764479Z","times_seen":37056,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/parallax-scroll.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/parallax-scroll.js?ver=2.1.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1854\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9301,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"58d35988547129c9204295262c9f149a","sha1":"fbd7b2772d647f6bbcf98bc7d1909e5c27809df5","sha256":"a96a9d0e49111aa168bd7f45fa84ea4b5455f9274cae49d3b371f17d4f5444b4","sha512":"9a4b03e0cdba335bb3dfb0afd5e67a7d326a5513d2a463ea279493c5c1daf63eb87ae788d8c57f7474375182491d53eb88688fefd794f26cd468e418021979b6","ssdeep":"96:mTrhwew3hcUl2p3R0NIXCAVC7kCVCd4qv6NyHQsmT9CRmPvvobG1UG8qwkIuA5:QN/wxcUUBDVOkiVNyHg2mPX+x5","tlshash":"58120108e411052ae5f67335cf7d03aafb6a761b92519169bb0dc98d0fb083493a4ff6","first_seen":"2023-03-07T13:47:18Z","last_seen":"2026-08-10T01:45:19.784752Z","times_seen":569,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/nav-tool.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/nav-tool.js?ver=2.1.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 318\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1086,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1086), with no line terminators","md5":"e28a1be506d3151bad02d20a7751f09c","sha1":"d0a106cd4d593b36c86c3740d26b6d332c740207","sha256":"e35de31330187c0f62603f8b770e2969cbc3fe0d885aa02c7dcdd6fbe5134691","sha512":"e7faae5c7937eb0e2569b90d0dd804b6f0a5c72d30f148770f36c5bde1fec88fe412be41416f91d1caf5fdf6a07059a31119673bdd003ec9f70789eeb9c84455","ssdeep":"","tlshash":"ae11aa68b830e2fd01fb631930139e40c23a0dc5ca2c1d95982019882e6bdcf41eb7fe","first_seen":"2023-03-07T12:02:54Z","last_seen":"2026-08-10T05:02:00.159335Z","times_seen":954,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/images/icons/icon-94.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/images/icons/icon-94.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1596\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1596,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"06fbe34b6d91fdb5061759fd85e6a487","sha1":"cf83754ff5a0b7670d660f945ac9bc0249d70791","sha256":"28934d82c32762638bbae44494e7b3f184a4735c1a652f825487166f34611df7","sha512":"182e50ddde0f5467919e2a2ec5cc9534eb741f4bf00d5a780cfa84aaf84b584132e62ea0d03ceae5b481e506b818b6c2f39a15bd2d7ba0259d155038e0f6c115","ssdeep":"","tlshash":"ff310c8cdac06f019b5ce64778d940139d23c78043d4f0a9bccbe403ae709b549991de","first_seen":"2025-08-21T04:39:53.409699Z","last_seen":"2026-05-27T01:35:41.575623Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1048,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/images/icons/icon-96.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/images/icons/icon-96.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1366\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"c4443362b76cdc61aaf0e4b3f4fa62e2","sha1":"c907ac4167a149c9cd6c4240c2f01eb4f69c2ca8","sha256":"a0600c1221de9ec83b49d64f9fa1e3724009415dd8b1de468895d8fcdf2559dd","sha512":"2beb43c51aabae1f2a36b3bc247669b8f9ad7b25dc742296ad4321463d020daa99bc27f1ab001b08009b691b8c1e4db4e52b242c179fbce5afadc7aad8f26195","ssdeep":"","tlshash":"8921a54ed7406f42c649eb872cea42331e126ec0cac0f4a6b9cbd506ac309fd19594d6","first_seen":"2025-11-18T08:18:58.856644Z","last_seen":"2026-05-27T01:35:41.576605Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.30.3","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.30.3 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:49:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10288\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32876,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32836)","md5":"1729e5f3ed23b6781e4b88a336ebff3a","sha1":"c1e8e0e91d28183b9c3ac67baac6c38f514d106b","sha256":"67e390e3ccd4903c7fce52d3031de0c7ac78431819fa7d47adfefefeafdfa5a2","sha512":"a99cafbc4a805388da309f949770a7026f45500a6bb4e9d4e1cf7250b6abace47a720d6d8e13839cc5359c69ecac4913c089b7823b30c66934fe6bedfb161cb6","ssdeep":"768:nRdRMtJR8RjDKv//DQl5ZnfVgbpM+MpKEAzBc5GlTSeUsveOBNU5aG9g3fWLJhoh:nRdCtJR8RjD8/0fVliEAzBc5UTSeUsGa","tlshash":"08e209527296d4a2069f48a3f0331119f3765dd9b80af0d8b2acdce1a475f877361b35","first_seen":"2025-07-22T15:49:24.306423Z","last_seen":"2026-08-12T07:51:56.392413Z","times_seen":3093,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/wow.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/wow.js?ver=2.1.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2037\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6300,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6269), with CRLF line terminators","md5":"11ac4d7173a68c50169addca2ef1b827","sha1":"621284d032a248c41753e995680fc30089bd374c","sha256":"dd90fdb6538987fe7975bd43803b1c7d8d62912a371c788caec32d016e09dca8","sha512":"658888b9d89577b55798fc56451f9458ba9b4885573a96480fd9bd480cb59854769964da9a5f54feba19ba66fa6df44c79203d35f1d6d9cafd84886c58e233a4","ssdeep":"96:3GqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:y30suCYOVEE7ne4JqgpIwdh","tlshash":"bbd175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f38","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-12T03:05:30.164853Z","times_seen":5550,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-includes/js/comment-reply.min.js?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 06 Feb 2025 17:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1247\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3026,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2991)","md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-08-12T12:37:41.413092Z","times_seen":92597,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2024/09/banner-6-1.jpg","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/banner-6-1.jpg HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 23 Jul 2025 11:58:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 238293\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":238293,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x817, components 3","md5":"5999c361e063dfb3f4cd02c2d9d69631","sha1":"9bd9812e3b9f0eaaa51c6e0c0467574d9c0c4d85","sha256":"b7f4a5db8b0d14fbbda9a9b9548df0966c82c42b6e514b77326449700928e642","sha512":"8d4f00e6f294cdb8848c10065141fa2d7319fefd5eff8f930e96636d395b255a89e9efa938f970af995d46a3b15dbcea2678d6eebeecfec2b419c2fcaf96b13b","ssdeep":"6144:sn8f3r6mb6HRye7G2JebhShasG0jR0EYUXssuejnvVdOvKRxAt4grI5:Q8fr666HR/y2rOUCDessueOAxADrI5","tlshash":"7d341235707ad9a4ec8c467d92e5e6268f3a4013d68ab3f1353988f3961f6068c7f613","first_seen":"2025-10-17T20:34:56.802803Z","last_seen":"2026-08-10T01:17:43.555739Z","times_seen":10,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/owl.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/owl.js?ver=2.1.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19365\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89992,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (360)","md5":"ccdf893e7d8b26933af0c336bcc3943e","sha1":"ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0","sha256":"db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466","sha512":"818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv","tlshash":"bf9393c5f36c261b422631785eae23ce723d402ad911186f7ca8e9dc29d546c436eff9","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T10:48:36.428103Z","times_seen":12764,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/isotope.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/isotope.js?ver=2.1.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9890\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37779,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32039), with CRLF line terminators","md5":"55c61eb8802947bf0d14f5430dfdebcd","sha1":"462535569e9282274bdd71e0a1393052afb426f5","sha256":"4fa72a8e292674529c8c0fdc8b0ccb7974e214d83e862316e91743ed7453b1c6","sha512":"7a43ace9c2badcf6e170cd09a0b4e53232e52f0e0f6e77522e2af9e02a0ed8002c7437effa4e51e8b32226bbdb2d6c2d78d7c2e507615b8dcae28f6756d274ed","ssdeep":"768:njlIew3PtifBnQ/KMDwmWD6sMKD6gjfGQre4+uhFVByQ9zx:njWSBnQ/LEBD6YD6Ee4+mf9zx","tlshash":"3803b649b74079304387b1a696af110f733aa47ca90690ecb369d8fb1cb684d6133f79","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-12T05:58:33.605426Z","times_seen":3300,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://virgogoldonline.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34704\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 May 2026 09:28:46 GMT\r\nexpires: Fri, 21 May 2027 09:28:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 489986\r\nlast-modified: Wed, 27 Aug 2025 19:21:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34704, version 1.0","md5":"c501f578bf3fc800c20056df516ed9f2","sha1":"38c3847fadc85a32910d7442570aa7f96c4db540","sha256":"e9201eddf1d41d0b62253295d869ce3cf65768f7102b797f02c7f8c876b4a9d5","sha512":"5679059906db74ffd7a5a3411e9dc2f23ac99bf7e4a770aeeaaa2e333edf5884d0b73a77ba23934e5d2c70cae0360ef72d09bf751325ad6f65d27a4e58d48201","ssdeep":"768:xlirkELnno1hXzn/AAfuTLFYVCo9gV9atOpJusC5X2zTsAyaM://Ejno7XzA8uP6g4VtOHU5mvsf7","tlshash":"b2f2f2d6d7b0168ede64e8a7c18d301745c5793489c7a97822ef5eea4278c580cd0afb","first_seen":"2025-06-02T04:49:13.271182Z","last_seen":"2026-08-12T00:40:04.103799Z","times_seen":1436,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":202,"dns":0,"connect":47,"send":0,"wait":48,"receive":54,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2025/11/bank-building-1-70x70.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:13.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/bank-building-1-70x70.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Nov 2025 19:08:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 853\r\ndate: Wed, 27 May 2026 01:35:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":853,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"bf143eb0990a8f565198b174b45c16a7","sha1":"7964db7b801fe20f0ed955707a06251ab009f7e3","sha256":"2a8ece9e48073e7a70113a453058368d9795463dcf5d471195bfe9518f0aa56e","sha512":"b5a1ef8878af1880b3287da20f588f2198af7fc54071212206cb8f8139d39cf74b5b022c95bea8153ac2dc1e43c8988141f40b5d53d99c55c2a9ccd5173eb261","ssdeep":"","tlshash":"b0018663e197422d4b1f02329a5dc143c2db564c379b1e3c72392af663117c1ad6729a","first_seen":"2026-03-18T17:02:18.246539Z","last_seen":"2026-05-27T01:35:41.586881Z","times_seen":6,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2024/09/chat-1-1.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/chat-1-1.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Jul 2025 11:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20452\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 104 x 119, 8-bit/color RGBA, non-interlaced","md5":"98b480b12e778fd9e3c80e4fcf2f1feb","sha1":"038bd8c90f1ac9fc99f56d2b0db9dc69736e1666","sha256":"69de46dc4864f4e60a64a081be03e2990a933adf9184bfd840d0e0a7469e17ad","sha512":"0484595da9e6eaead06dc2bd0422aa861fd5572bab09556e09a781d53f1d3a464cc9474437dfdb9e69ef02aa4bd22de4092cfbde0266e6e4b187fb17a6813653","ssdeep":"384:2Wb5OoDbKJWcN4rZZEp0SpNN+Y0EWMEDSzkqj6X5/8J8Ud:26OoDXTkp0S/KEPEDF8J","tlshash":"2e92e156193ac26162c87af974f8c20b18367711f39ad0b7fc71ed0257489e5029a77f","first_seen":"2025-10-17T20:34:56.839492Z","last_seen":"2026-05-27T01:35:41.587855Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2040,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/jquery.fancybox.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/jquery.fancybox.js?ver=2.1.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34739\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":154104,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6e11711058a9459a94d5a19b26a78135","sha1":"76792d5913afe035b6ccbac585b0b5e70b33aa76","sha256":"7b99eee1db728472aaa8452017a0d755f488e8d647cc0f62baf45f8ff65b95ba","sha512":"6ecbe997bc6e82fa7976a98e291ec31e043de23f0f5d06834fcc809cde8d0c3ffa0e96c734dfc0b0fbc313e405eac603540913794bb3a9a86ac56db5d2ab868a","ssdeep":"1536:26iljQs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSp:2NoETcqwF3wO/VUbZZr7WP83RSD6E3t","tlshash":"f3e3968a67bd112589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-12T10:36:17.542314Z","times_seen":3610,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2025/11/bank-building-1-300x300.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:13.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/bank-building-1-300x300.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Nov 2025 19:08:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4428\r\ndate: Wed, 27 May 2026 01:35:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4428,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"71915574b92e3e2f7dd09718044b8d9a","sha1":"143789f9c97f42673539a3c63d9d3391dc5989e1","sha256":"e5e2c807da5bc2caaaf7615f0026ad0d907be889699815d02e1e2bf84c4b2633","sha512":"0ec3628ded8a6b7e91c9c7a9c026d40f46ade7713c20e374f6fe74e9af0940246708cbbf3bdb9af7f31cc6b2731aba7e70263a0abf5707c5efa93b260b4849f5","ssdeep":"96:3Vz77EPXTWCNZxPDEhu1NWFCLSHfs3TYGfd2280a:3R7clPx7Ehu7WgMsD5Va","tlshash":"bd91b3830d3fb7010fe852d7f923e4a7b5b45d7ab15a2ae960e4c69c460e5047c81dbc","first_seen":"2026-03-18T17:02:18.294713Z","last_seen":"2026-05-27T01:35:41.589348Z","times_seen":6,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/style.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/style.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 33307\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":312482,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"8a919e2bf28559c94769de501d426a4d","sha1":"720e938fa423a74dae3eb4abce90700255da7497","sha256":"d738903f3dc453129519b2f522219e96dc57d6816cadb215f8919d0b9d4ac31a","sha512":"214cc53b7d146e163227c2905d97146cd41c93d99315f367a9b9cda9686cfafdc44e8e9249c3f1045ccf477c500b1e04020c99d229ec65f8460853a60d256487","ssdeep":"1536:Y/Q5eCBOiJyHA7TmV6O64616i666O64616i6V2Q9que3xSxaJPM6O64616i6K6Om:CHA7TWxSxaJk+Dwxrx9xW+9itCxX","tlshash":"7864539cd226114a6333eb997b81375956745052ef1202acfbfa5008a2cd9bc5363fef","first_seen":"2025-11-18T08:18:58.888583Z","last_seen":"2026-05-27T01:35:41.590041Z","times_seen":15,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:12.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:50:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 582\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4458,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"6333e839352933a58f909755477b9aaf","sha1":"3c2f7e8f9bfc19686f6c315e367cf7fdb482c78d","sha256":"1e91b6fe4d480e22497b684271105eea7eb2b93152797e15926061b2c84563fa","sha512":"ae36a5f816ac92466c2a63bd65576b7434bba909fa91f14520b88ef4af788399e75999d1868dd8500faef194ee6cc84498f636a8e81df7a5e08c639bf32514a3","ssdeep":"96:ka07wsAKuuGLriLDzLiGLroLDzLOG1raLDzL4GPrKLDzL8GfryLDc5PLAGdraLl9:d0oyGLOXiGLkXOG1WX4GP+X8Gfmk5zAd","tlshash":"ab919cc0fe7d4296a966379365ad60d9299c1439c89320f3f1fa26244a9cb1f217e91c","first_seen":"2025-04-01T13:06:23.867241Z","last_seen":"2026-05-27T01:35:41.512662Z","times_seen":22,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/owl.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/owl.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1211\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5687,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2533294f7dc4b3e5058137ee7cb5e4cd","sha1":"2cb838977a627685bd9c859b2ded113354d7167e","sha256":"9adccd8a6dc01dba5749435237862c643f8257750b4b0908918690bb2a51d0a6","sha512":"ff2ee31904b2e8616782991b20e29383db9055fe3f47d33d6bfdb1176688dcabe69faebfc16774d4a050df8785bf308af8810db4ab9a4ad61ac7240b0c157c87","ssdeep":"96:2VhwmIexMx+i+ATjFG1ovtcjxYfmIeHHcN:2VhwmwjT8xjYm9n2","tlshash":"13c122ec1321114d64378ba41b9d961a7e3d94a1ee02058cb9ef671283dfe5c902ff6b","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-08-09T22:20:46.956105Z","times_seen":439,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/animate.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/animate.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5127\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87995,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7f13658d912dd28dbcc9cae913c6da9e","sha1":"0911bc3520e476c1bd78f3dcfd22bc0392c553a7","sha256":"ecc3ec4d5270b6c94a9a52e909dd8b0a100b4745d9b6591758b127e10eb85f2a","sha512":"f59e790c15f4ab82ef466cccccdc7ab5fa3b29d24554a5617dc156caf4cb34972323f7c3f9527cd3b642f7e9349c2f5665741edb5b3f04307e82a5da8d75510b","ssdeep":"768:I1A1vYyY21f1NYtY7XXYzYtYOYrVDV5YMYvbYql:dYyYaYtY7XXYzYtYOY9YMYvbYql","tlshash":"f3832d5a1c41118447724b29d7de8f28eb3d957318222eee73c2588b8fb6fa853c9d47","first_seen":"2023-05-23T15:21:36Z","last_seen":"2026-08-10T01:17:43.519516Z","times_seen":378,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2024/10/banking-3-1.jpg","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/banking-3-1.jpg HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 23 Jul 2025 11:58:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30025\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30025,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x200, components 3","md5":"24785e1a5f8ed08ac0f181c2b0b67396","sha1":"210f6ac41ee67f74ade2c25c2c7bd7680829f045","sha256":"eaeebbdaf48cf0785d330837f1187c748b634d6e9db5b2b08caba8245249cd9c","sha512":"39ccc66d9c4da694ceba29e458c50eac4107238c535d1982f5fc3bc0fe8eb41e816902ff144a08cde4def8131963caa05e72872bd83d67b71306a0c1b6489b14","ssdeep":"768:k+4D77dRux6IL+PrJwtiLRsNih1HJLMdik0nE:dgXXux6IL+jJdts8Hsn0nE","tlshash":"51d2f1d2655a460cb8d9ef4479c6c8635198ab2d531bc87f83d5b12cb40c43b70bb9fa","first_seen":"2025-08-21T04:39:53.389675Z","last_seen":"2026-05-27T01:35:41.593731Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2092,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2039,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:12.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/hankengrotesk/v12/ieVn2YZDLWuGJpnzaiwFXS9tYtpd59A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://virgogoldonline.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34704\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 May 2026 09:28:46 GMT\r\nexpires: Fri, 21 May 2027 09:28:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 489986\r\nlast-modified: Wed, 27 Aug 2025 19:21:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34704, version 1.0","md5":"c501f578bf3fc800c20056df516ed9f2","sha1":"38c3847fadc85a32910d7442570aa7f96c4db540","sha256":"e9201eddf1d41d0b62253295d869ce3cf65768f7102b797f02c7f8c876b4a9d5","sha512":"5679059906db74ffd7a5a3411e9dc2f23ac99bf7e4a770aeeaaa2e333edf5884d0b73a77ba23934e5d2c70cae0360ef72d09bf751325ad6f65d27a4e58d48201","ssdeep":"768:xlirkELnno1hXzn/AAfuTLFYVCo9gV9atOpJusC5X2zTsAyaM://Ejno7XzA8uP6g4VtOHU5mvsf7","tlshash":"b2f2f2d6d7b0168ede64e8a7c18d301745c5793489c7a97822ef5eea4278c580cd0afb","first_seen":"2025-06-02T04:49:13.271182Z","last_seen":"2026-08-12T00:40:04.103799Z","times_seen":1436,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":102,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.30dc2f9c080845a413a6.bundle.min.js","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:12.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.30dc2f9c080845a413a6.bundle.min.js HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:49:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2546\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8541,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8501)","md5":"8516e1abe34afada26c662bab66f61b6","sha1":"5743609cc75f4826f61b3637056fff91ee41b147","sha256":"7c7064750c149fcc96e0a855b2be5e80b89cee5eafcda135fbe035ec0c1bc1e2","sha512":"34e94ced05b0c6b760739ce13288c31c4d4f743c627aeb17acfc8909683e557c6674dbb2fe04527fc6018e92283eed9e50db5cf86b0f677fd7f00f8f59d955cd","ssdeep":"192:AwfFpzqxODoWV5KxZmdXLf+UvDZ5CMtakRhPZTxcMkCwB410QsFfpRHvcwxDnPoj:zHzqxORV5KxodXLfpvD/NtakRhPZTxcg","tlshash":"c402210a74c1942db58b58ba3532432c66a8014de1018f6db1bf79fb85a6d82377b7f1","first_seen":"2025-07-22T15:49:24.313045Z","last_seen":"2026-08-12T07:51:56.380045Z","times_seen":3213,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/2716.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:13.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:43 GMT","end":"Thu, 23 Jul 2026 19:44:42 GMT"},"fingerprint":{"sha1":"A3:CA:4D:A5:D1:38:98:6D:BA:D3:BC:97:38:87:2F:F8:5D:E6:F3:50","sha256":"EC:0E:74:3E:53:88:CF:E8:5E:13:E6:4D:30:1C:54:A3:37:E0:B5:23:14:D4:A0:54:54:76:D9:8F:22:7F:15:21"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/2716.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 27 May 2026 01:35:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:21:38 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 26\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":500,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"133b77ff9fc321682fed3cde12d6355c","sha1":"4cadfe2e9f50307a51f9d040a916cd4c09baaaa8","sha256":"f39e7ecf003f57bad813ff5b686add8eca88b02f364e0ba946d1ddd8eb25e61e","sha512":"474176f5d483a166386b68f70c0ace7ea7e0bea33525e52bf7dc6d53c11b86ca00bcfdc37213c3fc423a7e109d63b1b8bc102e020a5cc99f0b8ae614837438f3","ssdeep":"","tlshash":"d5f054044776e7c787a545c4ed206d9d5723d0ae9e5920c863d30c9853e6e9f7416428","first_seen":"2023-04-06T18:33:48Z","last_seen":"2026-08-12T05:36:39.532237Z","times_seen":3882,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":131,"dns":43,"connect":40,"send":0,"wait":40,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/css/nice-select.css?ver=7.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/css/nice-select.css?ver=7.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 782\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3070,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"674848dd55ad4513f925ec46023ec259","sha1":"28bfae567038caa99ed67c48e438dd71a9b3d957","sha256":"a2e80af54aeb5722550dea00f4475b5db5e787842baa3ac2d33d50cbd3e0e127","sha512":"cbc0fc8b15b738df3a7606ff40aab21b7808e4107af85b8b2adadcda06c6d3d6b8f1f07114955075cbba4588b8ddc47a21a7476a858d5bdc1859e05b5d93ecd2","ssdeep":"","tlshash":"4351c166d7530552206e467f7fd66a48233dc003b436ce6cbbcc96078f0e59868e5747","first_seen":"2025-07-13T07:01:05.112532Z","last_seen":"2026-08-10T01:17:43.53485Z","times_seen":49,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/scrolltop.min.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/scrolltop.min.js?ver=2.1.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 799\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":799,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (799), with no line terminators","md5":"7659661aad689dbdfda68967ba95d4aa","sha1":"8d1ac94fe3d2370f25beec76a6e523daa90341c8","sha256":"64144149c414bd3ad306e32b89e86b6adfdcafb71d8d43cd6bb6d025670578de","sha512":"017d820636a2177af04ae84196b758cfe8d10b5e2f141a66b6eafd96b30943c9eea8e2eb317325d19f16ebacfa92e38cf90945c33c5f2588fca6157c214f9e92","ssdeep":"","tlshash":"c501af146140d4f452fa507ad2b72ba17932a47f770711c4151a68b63406f3d5b93fe0","first_seen":"2025-04-01T13:06:23.879576Z","last_seen":"2026-08-10T01:17:43.523784Z","times_seen":124,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.20.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.20.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 24 Jul 2025 13:51:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 52333\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":221379,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65403)","md5":"a97ab2813f23b4e22d9dba80e592a60e","sha1":"d238f10757b1a28ee1eb989ae66ef21a01b884fe","sha256":"203c077c3b8457d69187e3af113c7c82e4a0f9df885738e688e0fcc4e9641a1c","sha512":"56f12908863a935bbe709c94f1d17063233b21010b077f59a3ea238e78f5d35a33bd31049a3bdcdd440e3ac16d1236a96dfbfc5c09ff52233b86795e3a849e1d","ssdeep":"3072:ow/wpH8dwtu8jbxwyvrlC7ao7iZ09sluH7://yH8dwtu8jbxwlR7iZ0R7","tlshash":"15240b92305298b646cf40afb417020df72219adb406b4aeb9fc8cdb55b1ec63376776","first_seen":"2024-05-19T00:36:29Z","last_seen":"2026-08-11T14:37:58.632056Z","times_seen":296,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:12.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:50:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 582\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4458,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"6333e839352933a58f909755477b9aaf","sha1":"3c2f7e8f9bfc19686f6c315e367cf7fdb482c78d","sha256":"1e91b6fe4d480e22497b684271105eea7eb2b93152797e15926061b2c84563fa","sha512":"ae36a5f816ac92466c2a63bd65576b7434bba909fa91f14520b88ef4af788399e75999d1868dd8500faef194ee6cc84498f636a8e81df7a5e08c639bf32514a3","ssdeep":"96:ka07wsAKuuGLriLDzLiGLroLDzLOG1raLDzL4GPrKLDzL8GfryLDc5PLAGdraLl9:d0oyGLOXiGLkXOG1WX4GP+X8Gfmk5zAd","tlshash":"ab919cc0fe7d4296a966379365ad60d9299c1439c89320f3f1fa26244a9cb1f217e91c","first_seen":"2025-04-01T13:06:23.867241Z","last_seen":"2026-05-27T01:35:41.512662Z","times_seen":22,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 11:48:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 899\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-08-12T11:26:26.518569Z","times_seen":139450,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/themes/flexibank/assets/js/jquery.circleType.js?ver=2.1.2","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/themes/flexibank/assets/js/jquery.circleType.js?ver=2.1.2 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1246\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4995,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c222981b8b0287f780028d52aeb49325","sha1":"f9ba9352703f435dafe7df2e596a45922d50ef54","sha256":"a69584d2eb48fe1595901289d5a2724c873515f857135e7890c56b9cf427f6a7","sha512":"c3cc6a266d680b8087113a2d21a10195f4783bbd8c5a304725dd6811889f11217e38fbe6eb6047947947dac640843ac5d126957309f533130d4423cc54f791cf","ssdeep":"96:oUrcUMyQMvzjDmSMqps+i5UIKzg/g7VUykACOzjRsIcxBy+nBOZ2W:1rXhQMvLTpst5Uz847G4CojcxIGW","tlshash":"baa1c0685e9a30251027b57ecbdf66447236921b001ad812be6c12d62fd1aac1be5ffc","first_seen":"2023-11-29T08:44:26Z","last_seen":"2026-06-04T04:46:08.572677Z","times_seen":31,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:12.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/flexibank-plugin/assets/js/banner-carousel.js?ver=1.0.0 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:50:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 582\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4458,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"6333e839352933a58f909755477b9aaf","sha1":"3c2f7e8f9bfc19686f6c315e367cf7fdb482c78d","sha256":"1e91b6fe4d480e22497b684271105eea7eb2b93152797e15926061b2c84563fa","sha512":"ae36a5f816ac92466c2a63bd65576b7434bba909fa91f14520b88ef4af788399e75999d1868dd8500faef194ee6cc84498f636a8e81df7a5e08c639bf32514a3","ssdeep":"96:ka07wsAKuuGLriLDzLiGLroLDzLOG1raLDzL4GPrKLDzL8GfryLDc5PLAGdraLl9:d0oyGLOXiGLkXOG1WX4GP+X8Gfmk5zAd","tlshash":"ab919cc0fe7d4296a966379365ad60d9299c1439c89320f3f1fa26244a9cb1f217e91c","first_seen":"2025-04-01T13:06:23.867241Z","last_seen":"2026-05-27T01:35:41.512662Z","times_seen":22,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2024/10/men-3-1.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:10.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/men-3-1.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Jul 2025 11:58:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 574465\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":574465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 788, 8-bit/color RGBA, non-interlaced","md5":"111dad9ac2da436de70447d407fa4ab9","sha1":"ead6849a2a2c72b3336ba770f6020934f046fd63","sha256":"f475e484524aca1f4e3fcf26fa754dcf75ade68159d5ba95cd3ff7d764fc0971","sha512":"71984c54f45d7559cd575ea2ad413242191d5e89adb73849f789d11faf3a0723d60b76b4de0e5190d2919f55e1f5378e99758ebaddcbb6991c4c70979dae2c17","ssdeep":"12288:66C4vlPFrh0nT5MW3PxsrKOEnKDXwmj8hFsXxYXkO:DvXrh06W3Px6mKDAm4MXx/O","tlshash":"2ec423c94add937e0caec8e61cf479895eca376495063a392b24f4b05af43fd8714236","first_seen":"2025-10-17T20:34:56.787856Z","last_seen":"2026-07-27T13:48:37.827108Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2070,"receive":519,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1 HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Jul 2025 11:48:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3369\r\ndate: Wed, 27 May 2026 01:35:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-08-12T12:39:33.484654Z","times_seen":226884,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/wp-content/uploads/2024/09/shape-10-1.png","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:11.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/shape-10-1.png HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:35:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Jul 2025 11:58:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 32244\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 626 x 606, 8-bit/color RGBA, non-interlaced","md5":"030de2b1b6ab56b7c782f327ccfe1861","sha1":"162b7c3ce2563691615c083db0a91fe46c7ab1f9","sha256":"aee9587079098a3c18cc02bdfc0d7c88952ce10ab5b3abeebfb0d48d20aceeb8","sha512":"a82fb6e30c70a82a72f40f796288635cf6dcb7050bfa8cb2ab78ca3b3ffe98cf8ac0556f20a11901fa6f30469de4d108f443e81acde4614bbfce465f5f8bcedc","ssdeep":"768:tvwFihvVFK0w0v8w9iCqNr0LGlUvIt6XEwb/NStVP:tvwFirFK0w0vdQa+UwtyEA/N0P","tlshash":"f8e2e15ea594fc15e5dccd33a4bb6252231806969cfd98fd64c8ec2826702db783119f","first_seen":"2025-10-17T20:34:56.565745Z","last_seen":"2026-08-10T01:17:43.493249Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-2.jivosite.com/widget/status/2643594/3MONJtp1c6?rnd=0.9359746817094174","fqdn":"node-ya-2.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"5.252.32.145","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:12.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /widget/status/2643594/3MONJtp1c6?rnd=0.9359746817094174 HTTP/1.1\r\nHost: node-ya-2.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://virgogoldonline.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: sw\r\ndate: Wed, 27 May 2026 01:35:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://virgogoldonline.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\nx-powered-by: foxy/6.0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2b8b973fb9b999df73e831d0067c2f52","sha1":"09f4d1eb7b5458e0d96a4bff48ff0330e36b3d0f","sha256":"58d03fdec1f40502c95ec54c043a3a9425f8c9e676dd1a6d68c193af1ee0a59f","sha512":"b72d849eb6e2a95f455a777662fc0447cb4270401dfab228791fefd00f42c09ac38146c94514ef84c2e751dcc53fb59a4ae735f0c496bf27da003cf5434cf102","ssdeep":"","tlshash":"9fa02435011150041310c3d0d1c775450530011333d1d034f1d1500073f7dd005dd007","first_seen":"2026-03-18T17:02:18.285406Z","last_seen":"2026-05-27T01:35:41.601011Z","times_seen":6,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":227,"dns":55,"connect":52,"send":0,"wait":197,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://virgogoldonline.com/","date":"2026-05-27T01:35:15.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://virgogoldonline.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 27 May 2026 01:35:15 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6a047476-eb0\"\r\nexpires: Sat, 13 Jun 2026 14:36:15 GMT\r\nlast-modified: Wed, 13 May 2026 12:54:14 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-14T14:36:15+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-11T22:11:54.729195Z","times_seen":16740,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virgogoldonline.com/","fqdn":"virgogoldonline.com","domain":"virgogoldonline.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T01:35:05.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.virgogoldonline.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 12:48:11 GMT","end":"Sat, 22 Aug 2026 12:48:10 GMT"},"fingerprint":{"sha1":"FB:09:EA:42:14:83:9F:F4:7B:B4:E1:8A:1C:09:3D:DE:07:E6:33:5D","sha256":"1E:93:F3:DA:E9:FC:E9:56:B9:E5:DF:B4:21:AD:EF:60:31:E0:AB:70:8D:5C:A5:B1:BB:AF:39:C6:F5:28:DB:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: virgogoldonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.2.31\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://virgogoldonline.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://virgogoldonline.com/wp-json/wp/v2/pages/298\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://virgogoldonline.com/\u003e; rel=shortlink\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 27 May 2026 01:35:10 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Contact Form 7:6.1","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Elementor:3.30.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Redux Framework:4.5.7","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW:2.1.2","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}],"data":{"size":123382,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11037), with CRLF, LF line terminators","md5":"91c8a73bd9047da566cac24913d44d7b","sha1":"ab51e5816491f6544b06bb57289ed5f9216fe7e8","sha256":"cd50b7bb30a7377f52d150247cd1fac356001b6541f07bcc6329dbe8a5bb4481","sha512":"0f295ad8127202d310a9295c831343083df8a40d7b466ba1d175b2cd8b3dd993209b9f6fbbd99f1a5587847b2691c2cea723635a4913449e30a26283747e0994","ssdeep":"3072:WB5gL3LQhKNxF+axkjGt0fZHPzd9CQkODfVja5DPszRVYqwsEhnGCNSZYfHSOopo:PLQhKN6axWje","tlshash":"60c395727a98143b025b12c79016a30da1cbde37ce52cae5f2ff215857e0fa1bc63256","first_seen":"2026-05-27T01:35:41.602149Z","last_seen":"2026-05-27T01:35:41.602149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5654,"timings":{"blocked":155,"dns":1,"connect":75,"send":0,"wait":5340,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"virgogoldonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"virgogoldonline.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}