{"report_id":"29354e8c-66b9-4d90-a077-5b95e26042f1","version":0,"status":"done","tags":[],"date":"2026-06-18T10:33:44Z","url":{"schema":"http","addr":"strath-well.com/","fqdn":"strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"title":"Strath-Well","dom":{"size":126267,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32658)","md5":"605740243835fc2e64936ddcc9adcaa5","sha1":"934891f4dad811638490b81b6d398365eaf5b895","sha256":"ac1999ce9dc676848208ba774ad446078149f33a1e36914a2a65a19efaaeec88","sha512":"794a371ccd8c29f9984b173283043db913ca92fd396f52a9b166426132f4b313f4e5badf92ec2b8050526a86f857ed5e457d2233f17f7a412063c02188419eec","ssdeep":"1536:xnypeAPWFRV4dHFD6EP4KORWGHcxGO89gmUER9aqhT6Nh4:xyQAPWFR9HcxGOigmZR9aqhT6Nh4","tlshash":"97c3f8b690f0043a0127c7a8eae477694b9dd247d51a0ace73fe12389fdbdd1619b309","dom_hash":"domhash8de888e72e4a7a80a920b64ce46f4f08","first_seen":"2026-06-18T10:33:50.946753Z","last_seen":"2026-06-18T10:33:50.946753Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"strath-well.com/","fqdn":"strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-23T10:33:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-14T22:22:05.140579Z","alert_count":0,"request_count":5,"received_data":62732,"sent_data":2741,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-14T22:45:09.968061Z","alert_count":0,"request_count":1,"received_data":19536,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"strath-well.com","ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-20","domain_rank":0,"first_seen":"2026-03-05T21:36:29.482152Z","last_seen":"2026-06-16T05:47:45.767571Z","alert_count":3,"request_count":1,"received_data":631,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.strath-well.com","ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-20","domain_rank":0,"first_seen":"2026-06-16T05:47:45.311403Z","last_seen":"2026-06-16T05:47:45.311403Z","alert_count":108,"request_count":36,"received_data":4118521,"sent_data":19032,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:6.0.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WPML:4.7.4","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Max Mega Menu:3.5","description":"Max Mega Menu is a popular WordPress plugin that enhances the menu functionality on WordPress websites.","website":"https://www.megamenu.com/","common_platform_enumeration":"","icon":"Max Mega Menu.png","categories":["Widgets","WordPress plugins"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"backoffice.backoffice-str-crm.com","ip":{"addr":"172.67.169.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-28","domain_rank":0,"first_seen":"2026-06-16T05:47:45.310787Z","last_seen":"2026-06-16T05:47:45.310787Z","alert_count":0,"request_count":2,"received_data":271356,"sent_data":1029,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17b0af9ff887592fa849b8c364b78559","sha1":"9fa1c80ae5178792c771d74757633bbe7e862391","sha256":"4755b3fc6f6a03e97f0f9d48020d37ef285395c48950a87cdbc51e76bf57feec","sha512":"d48f237558b23aefaeadaed76326799303c100c95acc66e53e4294ea67c68930949215ebdf702c4c3848d52f8b3839f4ed5bc53b65859aae9868764a56f524c0","ssdeep":"","tlshash":"32d0122920e76d3fff4336052406261734344d89541b4ecd57d6ec60def1c4e8496e57","size":208,"data":"","first_seen":"2025-12-03T19:06:44.844339Z","last_seen":"2026-08-05T15:52:23.111263Z","times_seen":1677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d3c821f8991fe8c214fa99c9ce36e43","sha1":"87c83eb4894d512c70b1fd89b17eddd75229689c","sha256":"4cae41d5a003bcd173c001773e8f154b0fc2648bc344597dac0d1f28d4fbe55d","sha512":"0152aac4aba9372b5e19f8d7c40c3decad9f836360fbb4f4f124b598b510f73359ff8ebd7e8ca0f0f150f1b88467e2e7590abc3f88952a4c9d6f6fde3b108467","ssdeep":"","tlshash":"e3f06d3e70b9a0da80372804aabf4ab4b852e4472541de16791c92451f2b22c15f313c","size":462,"data":"","first_seen":"2026-06-16T05:47:51.726226Z","last_seen":"2026-07-09T07:08:42.429053Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1d85dfcc63189703c1709b0a36889a8","sha1":"00345c0549aeee3a90a6e22cd1019ea649f0100e","sha256":"0e215ace7b4e02596099832d6cea8c1d758c71417542b65abf001ef25e3d30e6","sha512":"4021934ff9646f998eda599877615f2afd1bf05b76edca947229fde5420c23125a5bc849c3d9203b0ef81a4ff64a34a4eab3725cad35ed92cd3a78e3ad125958","ssdeep":"","tlshash":"b2e0a76b257512394a6785556b5b9aa9333804c3648909343d0e44aa4fb5eb10cf25e5","size":351,"data":"","first_seen":"2026-06-16T05:47:51.727079Z","last_seen":"2026-06-18T10:33:51.003676Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-08-05T16:05:54.428936Z","times_seen":38531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9967c0f5402b8c28dbe96a24c8d9440e","sha1":"0186b56cdf92050c446c73d6e983b43860816309","sha256":"3dd041f68827db440b01b907800e86d628a829fffff6bf62e34c5f922c3d09cd","sha512":"0792d62c0bca6a7f1c1b7a3a65f9d4ed829dfa779dd090ee35309bca35f8126ef368d9799c656ae0caa619dcfdc358cdef67981efd991fcdd22a64d2aaa9f227","ssdeep":"","tlshash":"0ec080d9d99c5d4514dec244017c131075159517c61f5e45f34d014c5fb40b97d143c9","size":176,"data":"","first_seen":"2026-06-16T05:47:51.728412Z","last_seen":"2026-06-18T10:33:51.005202Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"43c67c417ec80650941eeb345af9e409","sha1":"9d78dd9245aa66fa3a63685e0a97727976ee0a0c","sha256":"90d1bce4f5062d33ff8e9d8efec434ea4289208aa310474b5f00748d3ab0f473","sha512":"735267e1cc1ddc750b00d7e756c9affe9018bf1de8014c57778c0a4e3ecc1bcd0316ff274f70d55914168f8c5a841ce4209e993e4f48c14c31770368b8bebde1","ssdeep":"","tlshash":"47f0c96d2025ebb2a3a6878d44751e5f4e5c01aa339146aff0f1ba208b58c94b04fc18","size":533,"data":"","first_seen":"2025-12-07T22:33:40.174315Z","last_seen":"2026-08-05T12:41:25.133031Z","times_seen":858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5015,"data":"","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-08-05T15:55:30.035124Z","times_seen":37692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","size":5697,"data":"","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-08-05T15:55:30.049305Z","times_seen":36892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.6","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-08-05T15:58:16.429969Z","times_seen":224305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.6","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-08-05T15:58:16.427263Z","times_seen":231571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"556bdc15c73bb51275d91f1d0a372302","sha1":"a14526fae85e625f3a8bad37b15add72f2a2277c","sha256":"e1c0892d45902632aed19e5830bbe8daa2a2bd4efd37d6d9d6bc80948e868692","sha512":"d30fe785ee8ead0e804103f71960f424d97eac6fcb44d3edd06ba672d41eaba88d4ceeff6f8998db2447d6ce6cb24cc367b1ced1aa59860e5eb2bc09b630c1be","ssdeep":"","tlshash":"8d81869ae77a38dbb2f900f2697a0d47eb614435d6c8d438c9bea3141cb5893c274b46","size":3956,"data":"","first_seen":"2026-06-16T05:47:51.73061Z","last_seen":"2026-06-18T10:33:51.006329Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-05T16:03:00.602854Z","times_seen":1005694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-05T16:03:00.605672Z","times_seen":921642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/js/bootstrap.bundle.min.js?ver=1.0","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbf712d74402ad1058179b8d99188421","sha1":"6b09e37beb628d02b9d216337d1dca189eb2a2c3","sha256":"8613bcd255259f9efd2f183c4534973164b19313176d74f35136b077aba1d81f","sha512":"f19ef34eeb3b70ceeb6e1a0900432f7fd5ecfc0bf2660f204189b596ab61ba9859936db21b7932296631bbda2b6356ec91ed519a93b4fe4fbe85daf5ead4031f","ssdeep":"1536:MKYMykJvis+xtVRe5YZv0Z0XXZ6cZZGYeIBUH4eqyOc5dtbweAH81NLsxMlHHOzL:M4KsSXgYDsdtbweAH81NgxMlHkz","tlshash":"5093a61933c57a37468aa0b6ac7acd4bf33565986387500c765c88ec263dc74a376ef8","size":92553,"data":"","first_seen":"2023-12-20T08:32:17Z","last_seen":"2026-07-28T12:02:32.294179Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backoffice.backoffice-str-crm.com/js/socket.io/socket.io.js?ver=1.0","fqdn":"backoffice.backoffice-str-crm.com","domain":"backoffice-str-crm.com","tld":"com"},"ip":{"addr":"172.67.169.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c52fc8c38a700e755b25b5b7ab1416c7","sha1":"a2eb7286835b84015d8df96fcda2d6f9aea4f25e","sha256":"682ce23762dd7b998f0e0c4bf497ebbe55431dfaf96da74c3aa8ff43ed6a7c1b","sha512":"1f6ff47b9a1bc377bfb3b2bc7ffe4e10f447f92a0b64f53a8da6f3cb0565782ac9b56ad6d2c0b1b2eb154bc6f52e893ba3679e00bf259a1e09a09bbde0468b4f","ssdeep":"1536:Uu6B0JZigd0rWdHtIABkoZBVLyDDYFShOSmSwPTNJgZ7hRT6uq3:t6SqWdHZBkoZBVLyDDYFYQSw0hF83","tlshash":"e5a30889b53150a847f37376806f1a0b763ee42a554c80a9f724dbf12df8d85922bf39","size":97710,"data":"","first_seen":"2023-03-12T10:07:16Z","last_seen":"2026-06-18T10:33:50.949084Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-i18n-js-after","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48be085f712f50a27e85dc7ce2b990fa","sha1":"ddeb4021ca5ce0b121797c5a9e63a53a3aa7a643","sha256":"4d92e70afa72219cfcbfd6adc2d1a245ebefe3e6a69280ed43e5f60163c3869a","sha512":"18029baf9db08ac4beca3d96bcc523a7914a8266c9a36d952c47af2e3aeb8f487318207ade0229bad0860c85721d26da828852a108b17747c1d086e2f51ed2cc","ssdeep":"","tlshash":"c71112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":1057,"data":"","first_seen":"2025-12-03T02:25:32.505911Z","last_seen":"2026-08-03T11:00:55.15894Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backoffice.backoffice-str-crm.com/en/platform/login-widget.js?ver=cache_2026-25","fqdn":"backoffice.backoffice-str-crm.com","domain":"backoffice-str-crm.com","tld":"com"},"ip":{"addr":"172.67.169.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49cda09d417f923b731ca2eb2eac7a3b","sha1":"78a2c03ee438d326ad572928c173b6a42752d81b","sha256":"1546b9e82b85eff061f9da4ea2f0070dfb32eb8fe02e4db8a75123a3d26e9ba0","sha512":"b1343876307325118b54e71f36d1a5b9066a78b1504777c169c11865d33d0764864f96e135ec5711b84889be6c5c750acf3874d34c2b78700be5794c64def0fc","ssdeep":"3072:U1PB6yyytsb6U9VUSK2hpCtUMde2+96WFOD/eYMStobH:U1PB6yyytsbZVUSK2hpCtUMdeTmxRobH","tlshash":"aaf31a22fdf3202d6433902ab7af7728707680135606ee25fd4ca3a05fc576916b67e9","size":171661,"data":"","first_seen":"2026-06-16T05:47:51.684418Z","last_seen":"2026-06-18T10:33:50.963762Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.5","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07ab1a6d9bb58aebbe0f1e1ae54902ff","sha1":"a483eb24f35775fb63755ee7caf5429852c6b177","sha256":"ef8df1e036642fe0c89e752645c2e70fcd80874342516b887987113955c4f033","sha512":"180f52004498efbac209c1277679a61f34e1bcb7703020a0175f1842f3f12410f035ad9d72426263ae90e7c053d0bc9b3395e56f68022dd492113a68af0bd9d1","ssdeep":"768:qJKuQzcvTQ7k7bUxL7ymsyR1goTRDRAR/RCRyRgRYRIRp:fGylTZuhk0eSCj","tlshash":"a1030b89b0ca1ae384bfb738eaea9168e76a06b34245c6507dfc84441f7745052f3f9d","size":38860,"data":"","first_seen":"2026-01-08T11:10:22.991575Z","last_seen":"2026-06-18T10:33:50.975715Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wpml-cookie-js-extra","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e00d7ce541daa4d6f5a09e265a49ebac","sha1":"4a59d0ceb1b0c3eb60b499935c8d5a79c4219ad1","sha256":"f6f5851ca0491c98b562d3013435565af14ed9f3c4696c3e463f03a6bfa938b6","sha512":"cea101f5eefc8fb703247da329d846e960caf6052fe1854cf6c2b2cd530e19b379b92de40fccddff8e89aea3cc0a2db617a89100ce6d01feda0f79d79a1b7903","ssdeep":"","tlshash":"09d0a928e0e7283bef433a352806261724300d88d40a4ecd02daec20cef1c0a8082e53","size":273,"data":"","first_seen":"2025-12-17T17:37:26.378991Z","last_seen":"2026-07-08T13:40:01.267189Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17b0af9ff887592fa849b8c364b78559","sha1":"9fa1c80ae5178792c771d74757633bbe7e862391","sha256":"4755b3fc6f6a03e97f0f9d48020d37ef285395c48950a87cdbc51e76bf57feec","sha512":"d48f237558b23aefaeadaed76326799303c100c95acc66e53e4294ea67c68930949215ebdf702c4c3848d52f8b3839f4ed5bc53b65859aae9868764a56f524c0","ssdeep":"","tlshash":"32d0122920e76d3fff4336052406261734344d89541b4ecd57d6ec60def1c4e8496e57","size":208,"data":"","first_seen":"2025-12-03T19:06:44.844339Z","last_seen":"2026-08-05T15:52:23.111263Z","times_seen":1677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d3c821f8991fe8c214fa99c9ce36e43","sha1":"87c83eb4894d512c70b1fd89b17eddd75229689c","sha256":"4cae41d5a003bcd173c001773e8f154b0fc2648bc344597dac0d1f28d4fbe55d","sha512":"0152aac4aba9372b5e19f8d7c40c3decad9f836360fbb4f4f124b598b510f73359ff8ebd7e8ca0f0f150f1b88467e2e7590abc3f88952a4c9d6f6fde3b108467","ssdeep":"","tlshash":"e3f06d3e70b9a0da80372804aabf4ab4b852e4472541de16791c92451f2b22c15f313c","size":462,"data":"","first_seen":"2026-06-16T05:47:51.726226Z","last_seen":"2026-07-09T07:08:42.429053Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1d85dfcc63189703c1709b0a36889a8","sha1":"00345c0549aeee3a90a6e22cd1019ea649f0100e","sha256":"0e215ace7b4e02596099832d6cea8c1d758c71417542b65abf001ef25e3d30e6","sha512":"4021934ff9646f998eda599877615f2afd1bf05b76edca947229fde5420c23125a5bc849c3d9203b0ef81a4ff64a34a4eab3725cad35ed92cd3a78e3ad125958","ssdeep":"","tlshash":"b2e0a76b257512394a6785556b5b9aa9333804c3648909343d0e44aa4fb5eb10cf25e5","size":351,"data":"","first_seen":"2026-06-16T05:47:51.727079Z","last_seen":"2026-06-18T10:33:51.003676Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-08-05T16:05:54.428936Z","times_seen":38531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9967c0f5402b8c28dbe96a24c8d9440e","sha1":"0186b56cdf92050c446c73d6e983b43860816309","sha256":"3dd041f68827db440b01b907800e86d628a829fffff6bf62e34c5f922c3d09cd","sha512":"0792d62c0bca6a7f1c1b7a3a65f9d4ed829dfa779dd090ee35309bca35f8126ef368d9799c656ae0caa619dcfdc358cdef67981efd991fcdd22a64d2aaa9f227","ssdeep":"","tlshash":"0ec080d9d99c5d4514dec244017c131075159517c61f5e45f34d014c5fb40b97d143c9","size":176,"data":"","first_seen":"2026-06-16T05:47:51.728412Z","last_seen":"2026-06-18T10:33:51.005202Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"43c67c417ec80650941eeb345af9e409","sha1":"9d78dd9245aa66fa3a63685e0a97727976ee0a0c","sha256":"90d1bce4f5062d33ff8e9d8efec434ea4289208aa310474b5f00748d3ab0f473","sha512":"735267e1cc1ddc750b00d7e756c9affe9018bf1de8014c57778c0a4e3ecc1bcd0316ff274f70d55914168f8c5a841ce4209e993e4f48c14c31770368b8bebde1","ssdeep":"","tlshash":"47f0c96d2025ebb2a3a6878d44751e5f4e5c01aa339146aff0f1ba208b58c94b04fc18","size":533,"data":"","first_seen":"2025-12-07T22:33:40.174315Z","last_seen":"2026-08-05T12:41:25.133031Z","times_seen":858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/contact-form-7-js-before","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f835f59d7db030c518aa2c7d71197c7","sha1":"bce7013c95f8aaeeec630cf2904d577c649d9c10","sha256":"6d6236ab6d670f7f6e5218373c8091531cb6d99fe45ebf418869c8484403270a","sha512":"74716db65464864faa17637eb0b63bb3ab7f7a25b8f2e532810b05e1c7b1a2a8251081107066690e337e2aa64093e1dbf9067a76a7b77eacb8a8bf7d667e48e5","ssdeep":"","tlshash":"b42180d9d99c5d4514dec274017c1310b5159517c61f5e45f34d014c5ff40b97d183c9","size":1141,"data":"","first_seen":"2026-06-16T05:47:51.724504Z","last_seen":"2026-06-18T10:33:51.014231Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=474000","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd958223d1a1703cafd2e98b997e7c80","sha1":"b2eb9fb7829b119db8e6261f5301d81a6e60d5bf","sha256":"ced75e292d9d105f83a61c1eb775f9a7905b5dcf776d183eaa566ef640a62157","sha512":"52035009026ca027ca0aabd1be36bc51372080645e296e50fa97278d16ad7544ae4a62872704e8428fa719d7dce4aa444d07c7e50c516f6e886d45aecd7d2b92","ssdeep":"","tlshash":"ace082183bdc062c0626731037bee6802c3431597082908e8388f4b419e4a23eca88b3","size":295,"data":"","first_seen":"2025-03-11T03:47:25.451557Z","last_seen":"2026-07-01T10:50:16.08016Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/dist/vendor/moment.min.js?ver=2.30.1","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3441db2e5557eb376162e813cc72ef7b","sha1":"741dd0b8ca79daff8e3660fac1ae4f13fd1c32e5","sha256":"74dda5bd9aa7fd915989733552449304255eff518a5191050674bb72687d6a30","sha512":"12d53b1f8711ebc49a45c8ca7eeefcafbb585b9745bbc3c4e5810de9ab8621060332ab1ea1ec4dd75a9b1c7e427b964f2b641bf45128369e3057b62370817b5f","ssdeep":"768:CHzJrvildboIzRFOWwvd3y+uuQkDjdVWGNTC1gxkO4fCg:qztivbocOWwTDBdVWITKgxkb","tlshash":"6243b3ce3586b11257b212b5086f050be33e59a9680e4d1cf508e9d97c79c6e427ffb8","size":58812,"data":"","first_seen":"2025-04-17T11:27:49.55038Z","last_seen":"2026-08-05T16:39:35.74011Z","times_seen":21275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/moment-js-after","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51b3d8bc333603039c37379e798d609e","sha1":"f561922625eb0ec787e4addd1805215d14bc1b3b","sha256":"eb4c5dc4e1734017d54da82fd6be372d0c0c96a26357d7d1b98993ac37a60ee4","sha512":"49f24966ac124b89806e6e902e1cab9442790d2150739fc79c8128849a7616d00a4bdc38a4fd81923abcf781710c4a764f307f03cf63709a9ab4d89e7ec3797d","ssdeep":"","tlshash":"0231eb1de015ebb2a39242bd44751e0b4e5c005af281466bb0f0b6208b58c90b04fc18","size":1509,"data":"","first_seen":"2026-06-16T05:47:51.729712Z","last_seen":"2026-06-18T10:33:51.014837Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","size":1499,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-08-05T15:57:10.370395Z","times_seen":87251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-05T16:01:54.886615Z","times_seen":310283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://www.strath-well.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj31 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.5643875652635997] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:mb-2 flex cursor-pointer items-center justify-between rounded-full bg-primary py-4 pl-6 pr-6 text-base font-bold text-white sm:py-8 sm:text-lg lg:py-4 lg:pl-12 lg:text-xl] attributesLength:1 isConnected:true kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://www.strath-well.com/","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj32 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.47282992109061805] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:mb-2 flex cursor-pointer items-center justify-between rounded-full bg-primary py-4 pl-6 pr-6 text-base font-bold text-white sm:py-8 sm:text-lg lg:py-4 lg:pl-12 lg:text-xl] attributesLength:1 isConnected:true kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://www.strath-well.com/","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj33 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.8235107311434089] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:mb-2 flex cursor-pointer items-center justify-between rounded-full bg-primary py-4 pl-6 pr-6 text-base font-bold text-white sm:py-8 sm:text-lg lg:py-4 lg:pl-12 lg:text-xl] attributesLength:1 isConnected:true kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://www.strath-well.com/","line_number":0,"column_number":0},{"level":"log","text":"[profile-virtual] IFRAME-CHECKmap[actor:server1.conn0.watcher16.process7//obj52 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[hasFrameEl:map[configurable:true enumerable:true value:false writable:true] href:map[configurable:true enumerable:true value:https://www.strath-well.com/ writable:true] ref:map[configurable:true enumerable:true value: writable:true] topEqSelf:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://backoffice.backoffice-str-crm.com/en/platform/login-widget.js?ver=cache_2026-25","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/js/bootstrap.bundle.min.js?ver=1.0","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.184Z","timestamp":1781778798184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/js/bootstrap.bundle.min.js?ver=1.0 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:20 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=713xi1zqsBQchfOO61v%2FY7Ab%2BQgdAxQJh64kbg6wcVBhqIsxKGk5T1j7wNSSo7lHn4vNd6l2jo9g4WZACDeMjBlkMEZfvfHuc%2FsUr2CRxpxqNty%2F1x0KbFJkgqn4P0sXeKIr%2FvIo\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a0d9a290a9f823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92553,"size_decoded":28150,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"fbf712d74402ad1058179b8d99188421","sha1":"6b09e37beb628d02b9d216337d1dca189eb2a2c3","sha256":"8613bcd255259f9efd2f183c4534973164b19313176d74f35136b077aba1d81f","sha512":"f19ef34eeb3b70ceeb6e1a0900432f7fd5ecfc0bf2660f204189b596ab61ba9859936db21b7932296631bbda2b6356ec91ed519a93b4fe4fbe85daf5ead4031f","ssdeep":"1536:MKYMykJvis+xtVRe5YZv0Z0XXZ6cZZGYeIBUH4eqyOc5dtbweAH81NLsxMlHHOzL:M4KsSXgYDsdtbweAH81NgxMlHkz","tlshash":"5093a61933c57a37468aa0b6ac7acd4bf33565986387500c765c88ec263dc74a376ef8","first_seen":"2023-12-20T08:32:17Z","last_seen":"2026-07-28T12:02:32.294179Z","times_seen":45,"resource_available":true,"data":null}},"time_used":2711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2553,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backoffice.backoffice-str-crm.com/js/socket.io/socket.io.js?ver=1.0","fqdn":"backoffice.backoffice-str-crm.com","domain":"backoffice-str-crm.com","tld":"com"},"ip":{"addr":"172.67.169.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.185Z","timestamp":1781778798185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backoffice-str-crm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 13:33:28 GMT","end":"Wed, 26 Aug 2026 13:33:27 GMT"},"fingerprint":{"sha1":"B7:B0:FF:CB:5B:76:83:67:56:07:1D:A2:48:AE:AB:07:D4:34:42:3F","sha256":"78:35:1C:E4:A2:29:8A:A6:CB:66:AC:AF:BE:52:A1:31:CF:81:70:F3:EB:36:6B:40:83:D1:C4:7A:35:C4:93:3D"}}},"request":{"raw":"GET /js/socket.io/socket.io.js?ver=1.0 HTTP/1.1\r\nHost: backoffice.backoffice-str-crm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 31 Dec 2025 16:58:46 GMT\r\nexpires: Thu, 16 Jul 2026 05:47:10 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 189967\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oBwWXFyPY6Z2MnSFokwrTU7uN9jlsNoNHlUJZ4iLCvVsOdZq8U1wErGSMJkqvn6%2FowdYbFAD9nnxv9KV%2BsKoMYJdyr%2BoQmTI56hUtvDVOxKkCoOxG3%2BXWBEO0flfr7VJEoudBv9%2BgqAmEkK5%2BpoXuwLLrCI%3D\"}]}\r\ncf-ray: a0d9a290eaff783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":97710,"size_decoded":26561,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32045)","md5":"c52fc8c38a700e755b25b5b7ab1416c7","sha1":"a2eb7286835b84015d8df96fcda2d6f9aea4f25e","sha256":"682ce23762dd7b998f0e0c4bf497ebbe55431dfaf96da74c3aa8ff43ed6a7c1b","sha512":"1f6ff47b9a1bc377bfb3b2bc7ffe4e10f447f92a0b64f53a8da6f3cb0565782ac9b56ad6d2c0b1b2eb154bc6f52e893ba3679e00bf259a1e09a09bbde0468b4f","ssdeep":"1536:Uu6B0JZigd0rWdHtIABkoZBVLyDDYFShOSmSwPTNJgZ7hRT6uq3:t6SqWdHZBkoZBVLyDDYFYQSw0hF83","tlshash":"e5a30889b53150a847f37376806f1a0b763ee42a554c80a9f724dbf12df8d85922bf39","first_seen":"2023-03-12T10:07:16Z","last_seen":"2026-06-18T10:33:50.949084Z","times_seen":59,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":19,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.186Z","timestamp":1781778798186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 18 Jun 2026 10:33:18 GMT\r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21659,"size_decoded":1594,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17ded04af7b0636d4f8c934291f09ac8","sha1":"d7766b8a83cf1d92c52f7a94654999e4b033365e","sha256":"54985fb48cc0470e63eaaf30034b348ed6bd73cac3f6a759bc1a1c19387af7e7","sha512":"ce25e5ca2afca5d262b17c8d5c5667cccaebce41eacc6afb16f5cd89a838bfd3192564f9a28b450646f2a2fd76414c462f095065c3a45ca72ce31df9c257748d","ssdeep":"384:H3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:XEA3mkX","tlshash":"5fa27ad1087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad97c654371b2d","first_seen":"2025-09-17T03:38:53.893526Z","last_seen":"2026-08-05T15:29:03.330404Z","times_seen":49370,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":40,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/uploads/2025/06/cropped-laborfav-192x192.png","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:22.450Z","timestamp":1781778802450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/cropped-laborfav-192x192.png HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 10:33:24 GMT\r\nserver: cloudflare\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://www.strath-well.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bpPFIAvKAT%2FfHOkX2UDqGQpDrmseKoVKhOxOSydx7s7MpM52SV%2FZXOCfN8nZq%2FtE0MCERqttu%2BeYSwsRIC3nAi3ToFytK3BlHBYz0JLtPNopP9tK9dwB%2B0wIU0LOSSkUrWR2HtqH\"}]}\r\npriority: u=6,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9a2ab5e2223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:6.0.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WPML:4.7.4","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Max Mega Menu:3.5","description":"Max Mega Menu is a popular WordPress plugin that enhances the menu functionality on WordPress websites.","website":"https://www.megamenu.com/","common_platform_enumeration":"","icon":"Max Mega Menu.png","categories":["Widgets","WordPress plugins"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":74354,"size_decoded":15398,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (32658), with CRLF, LF line terminators","md5":"507b3091ef5dbc629401463814adc167","sha1":"f217f1a3463ef73d8b9b16afb6dae2ab1b7391ce","sha256":"ec3d34ec0261d0e1ea52ffd944677067af4be88a86572219f4232ab5d93c728d","sha512":"1ec0cd3517d82d127370024e55f105f92a861a2bf2140e561b7653ddf4f83ba7de2f007285684d83e12904564a115f229f50b5c305ed82a003a082daf265360f","ssdeep":"1536:7nypYCAqWFRv4dHFD6EP4KORWKcxGO89gmUEsWhTz:7ydAqWFRjcxGOigmZsWhTz","tlshash":"4473d8b798a0052a10378b5ccff4a7148768d553d9196fae33fe2119cf5abc522e730a","first_seen":"2026-06-16T05:47:51.707069Z","last_seen":"2026-06-18T10:33:50.950441Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1676,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/css/dashicons.min.css?ver=7.0","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.172Z","timestamp":1781778798172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=7.0 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Jun 2026 09:47:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fnt6jCX0lVxBfirYH6U3%2Fw7QPHs7gyN0WRUhteeBD%2BkeONRUlON2CgAMNdEjml4jXw9YkyAiWRTXZpShK04QIYbHqfKyZcuTUjpwLkSbp%2FXCj3%2F0Zjbi0B9ivRTyw5%2BmDGKgWYsw\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a0d9a29099ef23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59004,"size_decoded":36280,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-08-05T16:04:54.304255Z","times_seen":66047,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.192Z","timestamp":1781778798192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Jun 2026 09:47:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rixMFgF4C5g%2B3IpQUlKraIH4IBYGn6cPzKdNm%2BXeRX%2FlQjO6%2Fm8guR9D%2F%2BQ8e89x%2BA4ucpMDerG3%2BN3LD0k8LOCBe0IT43qpgIMxtJe3cwhS0nbk6NGbif%2BlOZspSqo4VXgGqrTZ\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a0d9a290ba0e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5015,"size_decoded":2550,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-08-05T15:55:30.035124Z","times_seen":37692,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/dist/vendor/moment.min.js?ver=2.30.1","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.199Z","timestamp":1781778798199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/moment.min.js?ver=2.30.1 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:19 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Opy4pnc6u%2Fwhv5L5XVpElP9QFtIhPJ8vgLeQgUGBv8ucgbYY2ewdXRaKmPDuWuZg8cB9BYMzulAZuwhhPn9AT9pgJuKsdPfclS44vFpxaH4%2Bh2lalvQ0coXjapHe6It92vqqFl92\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a0d9a290ca2c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58812,"size_decoded":21379,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (58812), with no line terminators","md5":"3441db2e5557eb376162e813cc72ef7b","sha1":"741dd0b8ca79daff8e3660fac1ae4f13fd1c32e5","sha256":"74dda5bd9aa7fd915989733552449304255eff518a5191050674bb72687d6a30","sha512":"12d53b1f8711ebc49a45c8ca7eeefcafbb585b9745bbc3c4e5810de9ab8621060332ab1ea1ec4dd75a9b1c7e427b964f2b641bf45128369e3057b62370817b5f","ssdeep":"768:CHzJrvildboIzRFOWwvd3y+uuQkDjdVWGNTC1gxkO4fCg:qztivbocOWwTDBdVWITKgxkb","tlshash":"6243b3ce3586b11257b212b5086f050be33e59a9680e4d1cf508e9d97c79c6e427ffb8","first_seen":"2025-04-17T11:27:49.55038Z","last_seen":"2026-08-05T16:39:35.74011Z","times_seen":21275,"resource_available":true,"data":null}},"time_used":1261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1137,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/images/information-list-items.e2de567.png","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.221Z","timestamp":1781778798221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/images/information-list-items.e2de567.png HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:21 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TqDWH%2B2V7GudfKM3EE8Kiyu4folCOyfRxLaDk3t9zydT5rlsREeMacBVOasDNaGQRvkjyo%2FSU1HfDSEmjI9okC23EqDyKkUZjzjrhBbH%2BmPsMRXhYvo03q1otcgoI5ssr1Q5qHLE\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 435234\r\ncf-ray: a0d9a290ea6023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":435234,"size_decoded":435903,"mime_type":"image/png","magic":"PNG image data, 600 x 413, 8-bit/color RGBA, non-interlaced","md5":"e2de5678dcf46d436f387a6b47ffab38","sha1":"2593c148b1e760a1ddc8750d2669b2a834320707","sha256":"c2c5a8bb9bb7ae43fc1a728460dbd672879098de4d25fbcae760d4204226ef21","sha512":"9eb166aeb597e41a509fd85dd8714890933cf5e65fbd2b4853c5bf1bcd059230afef349f1f3b9fad98f8fc32e7aba0fafaa915ebef35ff7012e63d8adb80fa4f","ssdeep":"6144:lhr/giXu3sBXbe57T4CkoXX3A7Qjgw8Uf1yhZFam3NM4K/CVWxbFC0CIUtc37c:l2MEcMHA7e98UfkFauNAaVW9FC0jv7c","tlshash":"349423d7bddd84f425c24a084a06b2ac0a85ed6067f3235ed35e6cc6adf987c24ced16","first_seen":"2026-03-05T21:36:35.862666Z","last_seen":"2026-06-18T10:33:50.953441Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3501,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/images/p2.png","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.224Z","timestamp":1781778798224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/images/p2.png HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:22 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FRr5qFJFX%2FDaw1RR8K0S0X2e4mc4vkDgK5gl5k%2FdT19rjGOCsBjWUgWeT4GSOiS7P4YbrVQVaNyScloTjOAddpsrQRsnfmWnl5d4kbEpwNe76oP8yTYaEEozs57UywXDUpMyjVnf\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 156268\r\ncf-ray: a0d9a290ea6323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156268,"size_decoded":156935,"mime_type":"image/png","magic":"PNG image data, 484 x 484, 8-bit colormap, non-interlaced","md5":"c2caa8a2880d2c42a5149590dcd85d28","sha1":"8cfb7456d5c264236358c9ca7c6fe4820331ec8f","sha256":"ab46da99be569cb5d80f1b1e7a0d16bd3eb374a6162a781892fd7627b7b9999f","sha512":"f27cc50e0dbde305d92e6181b29f2acb88c00cbff628feee891ebbf302fb7eb2bd03ba8ba82439df5f71a4f6605bbae52216acf260ce8e171c7112c2ebff5d71","ssdeep":"3072:3DqfsvSmvGKpf+zkwrrZhm1BotgltWs3ZK63M9aVz9IITt34iZvzTr:32foSoGKQkm7m1Stglos3ZD3M9ajh4G7","tlshash":"f2e3130cda4aee8ea91d2ba15b1858d8a13d4fbf5d00372e07c57e9578336f9f032865","first_seen":"2026-03-05T21:36:35.85538Z","last_seen":"2026-06-18T10:33:50.954162Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4412,"receive":232,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.161Z","timestamp":1781778798161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4774\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"4816-00NTceTFOXSCfuleSHYg+tVGAkA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220161-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 13485\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KDC7Q1GEpAdds3WZYyabrD%2Bbx2iXOmK5Q5ZSpwLKoDY4gcRTZJviwuHOktZuqz12g7vnclw3hUPOtv%2FvtA2h6T8HsVmTIiGnSgaFCO2QOjMCLQ9lZDb3iuSPy8EDzmkZXk0%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0d9a290aafc1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18454,"size_decoded":5856,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18199)","md5":"6408a7c2033ed72b31f850268bfa9a0a","sha1":"d3435371e4c53974827ee95e487620fad5460240","sha256":"74ca6aae5468dbc924790c3b4d219a089b90a34bad53a0f7ca3a73e73b6f5ab8","sha512":"b74b551224b5abe662f4380393eab59b8f9481d8aff978af27d66d0e4b4b6eaaa4271f0aedb97c6298b3245915136f52dbc15135b46c04841b8214ea9397cbf4","ssdeep":"192:CzmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:CSUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"ce8256a45350182753274f374bb1cbb9e97444c20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-06-28T16:11:53.618794Z","last_seen":"2026-08-05T13:52:18.345637Z","times_seen":25673,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":9,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Comfortaa:wght@300..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.166Z","timestamp":1781778798166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Comfortaa:wght@300..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 18 Jun 2026 10:33:18 GMT\r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2209,"size_decoded":1283,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3c8e65d2f00b206a6a0b7967472d4855","sha1":"b5c9b91f516cc128366eb1f43bdf0f736be856ee","sha256":"57ccc74f201e3d32fb5abde8877b823e83eb53dcbdabefe0e76f6ceed7a51886","sha512":"7b0108aecd8c3b0662bb200d19c522e5a1f928e17e00a5396aa3bea7b3ca346b9c83d8b10d81b842024305893ffcd52e4b5a8f32a0a5f990f341398576612e02","ssdeep":"","tlshash":"494169d08017a444ea830cc237debf369e8e2615708185ba9ffd1ca86deec22535475e","first_seen":"2025-09-20T03:52:06.215857Z","last_seen":"2026-08-03T23:52:09.378258Z","times_seen":142,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":41,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.180Z","timestamp":1781778798180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Jun 2026 09:47:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3hXJKOS2yJH%2BXGdwEV1NVbjUZxBscTD7xAZB9JNhi2k74UW9Z9R%2FMofC7t%2FikxVMhMge5ErRmqXBMT%2Bj%2FtoYUm2Sco0Fo584p8OplAm5Qv4OUcZJgyHYElgCsKqiBKpYH%2BDPhnH\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a0d9a290a9f523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":33599,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-05T16:03:00.602854Z","times_seen":1005694,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/images/p4.png","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.227Z","timestamp":1781778798227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/images/p4.png HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:21 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3V1WfCoI4Mr7I63Fi5CDXrNLxLAQ06HeivRK07Bra394VQZh8Eafm25YDXoG%2FiF%2FMHmR83mwCV7ReEU4PHVsstNGycmEiBf%2BK%2FiKa3s7UHToIH65ah01ZYHNgcxeLR7vsF0LKP6c\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 393263\r\ncf-ray: a0d9a290fa6523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":393263,"size_decoded":393934,"mime_type":"image/png","magic":"PNG image data, 456 x 439, 8-bit/color RGBA, non-interlaced","md5":"32d7d77d8dab17a755267906ba57495f","sha1":"35ade980fb0b64975241b3ca4b34c0ca84967ba2","sha256":"a41a3116d3a68be42bd5c6efb1cc0d997780db338b9e835e6b5c8faca47deb9a","sha512":"226debc7ab8d2afdf43f6493253ad0799390685374c3c3ee7c199ee5f6c51e5ffe3dc9f371e353fc1ccc813283d924c07f75d8ce81e908caaf43a39ebbe3e830","ssdeep":"6144:8f9qV5bc4coR7uywrgEcl41UC9c424cb6huTDzBuBQIkGrbTRZ+yONIy3XrGCL:8YV5I4tNdwr7EhMc6h0HwyIkkvWbqCL","tlshash":"31842373b2840389f921bbd5924d6c4b61753d5323b8214e48f6948b80aebff5f94b4e","first_seen":"2026-03-05T21:36:35.914311Z","last_seen":"2026-06-18T10:33:50.95792Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3508,"receive":320,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/uploads/2025/06/cropped-laborfav-32x32.png","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:22.452Z","timestamp":1781778802452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/cropped-laborfav-32x32.png HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 10:33:24 GMT\r\nserver: cloudflare\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://www.strath-well.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6eYkQMD82PELIur5cHefiSy%2BHA4cveUgsnqsYwByebEMMLxRQQaVgqJrJULWKsURW85kNNEfUzjtdNAB4u0TfDyRZwCHGL1CaF%2FntDF%2FXQoboySBnMqnyMEpvjFnAp%2BWCqtC7wx\"}]}\r\npriority: u=6,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a0d9a2ab5e2323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Contact Form 7:6.0.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WPML:4.7.4","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Max Mega Menu:3.5","description":"Max Mega Menu is a popular WordPress plugin that enhances the menu functionality on WordPress websites.","website":"https://www.megamenu.com/","common_platform_enumeration":"","icon":"Max Mega Menu.png","categories":["Widgets","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]}],"data":{"size":74354,"size_decoded":15373,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (32658), with CRLF, LF line terminators","md5":"507b3091ef5dbc629401463814adc167","sha1":"f217f1a3463ef73d8b9b16afb6dae2ab1b7391ce","sha256":"ec3d34ec0261d0e1ea52ffd944677067af4be88a86572219f4232ab5d93c728d","sha512":"1ec0cd3517d82d127370024e55f105f92a861a2bf2140e561b7653ddf4f83ba7de2f007285684d83e12904564a115f229f50b5c305ed82a003a082daf265360f","ssdeep":"1536:7nypYCAqWFRv4dHFD6EP4KORWKcxGO89gmUEsWhTz:7ydAqWFRjcxGOigmZsWhTz","tlshash":"4473d8b798a0052a10378b5ccff4a7148768d553d9196fae33fe2119cf5abc522e730a","first_seen":"2026-06-16T05:47:51.707069Z","last_seen":"2026-06-18T10:33:50.950441Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1795,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1645,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strath-well.com/","fqdn":"strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T10:33:14.921Z","timestamp":1781778794921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ndate: Thu, 18 Jun 2026 10:33:15 GMT\r\nserver: cloudflare\r\nx-redirect-by: WordPress\r\nlocation: https://www.strath-well.com/\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v5YgIDC5Ds2mZhOkUnN1OceQh05jCUWrvo6Uf2%2B7GZov%2F8R8tjS4mwgf8ssv6vDWiR58cNZoRYobvBKOb%2F%2BE5d3lkzDSj9tqseqas5mqrw2kOxBvnghtlbCGZyJCsoXK9y4%3D\"}]}\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0d9a27c7eca23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T16:03:25.950869Z","times_seen":17727253,"resource_available":true,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":10,"connect":16,"send":0,"wait":821,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.6","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.168Z","timestamp":1781778798168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.6 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JK4Zc1W32j7v3sovV1va7mgS8Iamgi82pQ9roFsKDpdA6AcjkktSUlKzcwCdfRUfbgFGXLn%2BMKF7clzv8je%2F3lO%2FU7L5CKnQhCRENVZY7vvnSfpX2TFumOQLDAXmPLOLLfGhOVc6\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a0d9a29099ec23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3066,"size_decoded":1752,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1cd8f011bad260495510b39794f2e21f","sha1":"6146579876c477143b87b03676006bfc6b4ca6e0","sha256":"0d2c3e29840996671130511bfb8dd265813ea63511a29ae3267d70a84e5a0aa3","sha512":"b8df1ebc7fc0d3bc6d819b16aedbbf47e78b1b0878c5ee4684b584da39a705f6adb927960c7b0055b7fceb09fc0cd963c96bd1f0696b2f993753dbd611d035cb","ssdeep":"","tlshash":"de51f0b8564230454bf757d67bb09f847ea42461c91bab9e70d2163c07f89682e232ee","first_seen":"2025-06-19T02:02:06.035789Z","last_seen":"2026-08-05T04:30:56.39612Z","times_seen":91,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/css/tw.css?v=2.2\u0026ver=7.0","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.177Z","timestamp":1781778798177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/css/tw.css?v=2.2\u0026ver=7.0 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o7eOHUEB4k%2Fp8O0CUOcMISFuZcHdIP4MTbgdhQhjVtIjFlxM7fNY3f4F3ahRUsgnln9NqT4BaGBq4mdalsiD3G%2FPvZzh0UX%2BNLYG%2F5GfdWEG6c7Z0ay%2Bbi9gX%2FXg2bfnYNyc7ylj\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a0d9a290a9f323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128237,"size_decoded":19491,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f9b6b41a2a6e48eb7ebd45f7c3ad8fbc","sha1":"f663a27a05450ada3118a8ca20e9079ccf888f06","sha256":"9acc99342588717ef6006a741e692c9a5b1b200c3027ed42d29b561adfec067b","sha512":"01a8dd3846aa959e2ac282a2239062ca6a11209b0138f46a08cad65b71e4a77dee808af2acf365fcd21227b70b7ed9f0c0e98d8127d6b5e85bd3ec32b99c7582","ssdeep":"768:NKMRJrzRlg8+GHjptXs6h44lE3kmbkm4kmikmDkm4DnP5:P+G2kmbkm4kmikmDkmenx","tlshash":"aec31d0f990300091c7763b5defb950cfb6710a7ce16d6aabede60018f786a49992f1d","first_seen":"2026-06-16T05:47:51.682629Z","last_seen":"2026-06-18T10:33:50.961969Z","times_seen":4,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.182Z","timestamp":1781778798182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:20 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Jun 2026 09:47:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yrZ%2B%2FRcy0cbgku8JcbfyLGp0JzlL2iud1K%2BNCWxvYs7hpCJ2dnPeeEVomWR3HmTAKoP437z1NizLMQIYNwQNFHwW%2F5kHu4DgJdjnw%2BpHw9xiYyv%2B9jDOEiWoiuiaXDO4Ej3ujzaA\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a0d9a290a9f723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":5916,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-05T16:03:00.605672Z","times_seen":921642,"resource_available":true,"data":null}},"time_used":2533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backoffice.backoffice-str-crm.com/en/platform/login-widget.js?ver=cache_2026-25","fqdn":"backoffice.backoffice-str-crm.com","domain":"backoffice-str-crm.com","tld":"com"},"ip":{"addr":"172.67.169.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.200Z","timestamp":1781778798200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backoffice-str-crm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 13:33:28 GMT","end":"Wed, 26 Aug 2026 13:33:27 GMT"},"fingerprint":{"sha1":"B7:B0:FF:CB:5B:76:83:67:56:07:1D:A2:48:AE:AB:07:D4:34:42:3F","sha256":"78:35:1C:E4:A2:29:8A:A6:CB:66:AC:AF:BE:52:A1:31:CF:81:70:F3:EB:36:6B:40:83:D1:C4:7A:35:C4:93:3D"}}},"request":{"raw":"GET /en/platform/login-widget.js?ver=cache_2026-25 HTTP/1.1\r\nHost: backoffice.backoffice-str-crm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-login-widget-version: 1.0.7\r\nlink: \u003chttps://backoffice.backoffice-str-crm.com/rest/docs.jsonld\u003e; rel=\"http://www.w3.org/ns/hydra/core#apiDocumentation\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nexpires: Thu, 16 Jul 2026 05:47:10 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 189967\r\nlast-modified: Tue, 16 Jun 2026 05:47:10 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9nkvWrmjXK6ni1uwuKyFuUGL2hWqUjR4p%2FbZN3SuDjIwODLGvyFFXhCNdmsbfLcKZ8ITrEeuoxk23juv%2FTqKDiBK5BnW7OsfL2928aA5emL%2FcjbadopqZbZumPhYVaBK7O%2FybSg0cwtX6i6vIQ1JrxVyNQ%3D\"}]}\r\ncf-ray: a0d9a290eb05783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171661,"size_decoded":37057,"mime_type":"text/javascript; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7462)","md5":"49cda09d417f923b731ca2eb2eac7a3b","sha1":"78a2c03ee438d326ad572928c173b6a42752d81b","sha256":"1546b9e82b85eff061f9da4ea2f0070dfb32eb8fe02e4db8a75123a3d26e9ba0","sha512":"b1343876307325118b54e71f36d1a5b9066a78b1504777c169c11865d33d0764864f96e135ec5711b84889be6c5c750acf3874d34c2b78700be5794c64def0fc","ssdeep":"3072:U1PB6yyytsb6U9VUSK2hpCtUMde2+96WFOD/eYMStobH:U1PB6yyytsbZVUSK2hpCtUMdeTmxRobH","tlshash":"aaf31a22fdf3202d6433902ab7af7728707680135606ee25fd4ca3a05fc576916b67e9","first_seen":"2026-06-16T05:47:51.684418Z","last_seen":"2026-06-18T10:33:50.963762Z","times_seen":4,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":14,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/images/information-cards.1946907.png","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.219Z","timestamp":1781778798219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/images/information-cards.1946907.png HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:21 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSofYVyKvnhn5Kh6rhpti4LMAIM6AIJF1gMQDxeVAkqQE6TbgreSRBQ%2FpUajjDwnOAi2iYxfBFRMeUBKO0WN1TY9YbbBHLsN80gWCiX23qRc0QsyBAKrWDbdGQ45HyUrN%2F6Nm9HW\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 508793\r\ncf-ray: a0d9a290ea5f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":508793,"size_decoded":509460,"mime_type":"image/png","magic":"PNG image data, 667 x 434, 8-bit/color RGBA, non-interlaced","md5":"1946907049dbb0452d95a4967893bcad","sha1":"7169eae34674dd83ee4d7510dc854c672d751d95","sha256":"2af12374a97c52d953bbed01018fcafd3f45524aff2186e89c1739bc0826b795","sha512":"e564b56c36677f4dece96e088ced6d2035ba24768eaa3f210d5d9e61b4337bf8eb55f1d46ccd6650825920bfe5439f2a51f3373497829c9afa10fe22ce851714","ssdeep":"12288:joiUerm1bvc9A4MN+m/5zsD83zAqyZlzF5Uu:joDvyiNvWDVqyZZUu","tlshash":"dfb42354c3f6afb89b57e83a07d44acac8bad0335a315951262f8ef1531d2cc598bf90","first_seen":"2026-03-05T21:36:35.892128Z","last_seen":"2026-06-18T10:33:50.964492Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3916,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3520,"receive":396,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/images/p1.png","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.222Z","timestamp":1781778798222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/images/p1.png HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:20 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tcD1jAJHrVHiEz0IDNWzw11Vnz%2B8wR5jMLdmxpxl5DYnrmyeUqOrRIX2ImzYFjxvctuzPhy8px5OJo08NRanvxrsOlzLWj4%2B3SDHvpwwJp%2Boq0j3vLrpET14%2FmQ9SmbH7%2FBe3CRs\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-length: 433339\r\ncf-ray: a0d9a290ea6123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":433339,"size_decoded":434019,"mime_type":"image/png","magic":"PNG image data, 432 x 420, 8-bit/color RGBA, non-interlaced","md5":"a3ff40b6c6ba7824255e5a48e7a3fe4d","sha1":"9127f75ecdfa5ddaa3dbc219e062c339ffd9c44c","sha256":"6641129e1800ba5b327a26b70ef3b08f442c258808acad0df9dfac3a9136a47d","sha512":"63ee42ddc3f24d7bbd6f62f322264e0121521169576bf6a8909207363dcfe5ae6dca4e8444d140496efc9f49e03a3b18a7b50eaa823e60c8efe83e5114bb02c8","ssdeep":"12288:PY3du8dMMKRAHINa3LNKUokk7AJ3ZAB46MdbHxpuprO:ckm3jHINALNTokkcJWBAbHxpyO","tlshash":"6d942327e769a065c7c6e5a2606335af63d3cc5186f82ffbdec1a140503e6d206e845f","first_seen":"2026-03-05T21:36:35.888534Z","last_seen":"2026-06-18T10:33:50.966074Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2497,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/images/p3.png","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.226Z","timestamp":1781778798226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/images/p3.png HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:21 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmY73m8eJXAcH0JetiArPF%2FFhU0mJTlgZP8GK82Wsqg%2F11VzahKizjkcyRVtDwE1hC%2FcfjDW74VGa9KLuyLhiN10t%2BBcaoUchBmnhf8dAsiy6bR7PYFIAZExCaHwCoQLIJ4U50FV\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 466357\r\ncf-ray: a0d9a290fa6423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":466357,"size_decoded":467028,"mime_type":"image/png","magic":"PNG image data, 550 x 533, 8-bit/color RGBA, non-interlaced","md5":"d2775091dbf5bfc94bd950b811647927","sha1":"34b0f2a0d53dd0aeb2572a7c15ddcb56d9f06e0b","sha256":"a8dbf36cc742925251ed978c0be19de854e4c37bdb78a3e48d38377db696d837","sha512":"a21c6f1ad6856e11de636a3dc6694e92fbe77ba296c492335937f142b2802dc54c51b66ef3be6f3a810cadfebc595a8d383fcca94c371e72f9a53d60368536b1","ssdeep":"12288:FxkR1ZwpPYp8FTxKyCeNSk5p91Cpr6hzDJtaa6FHGoz9I:FycPYwp5p9Yr6hnfaFHGL","tlshash":"fba4232e1477488e97527187c506b29d62fa0d648d97abefc150183dff3b2972b630b4","first_seen":"2026-03-05T21:36:35.90727Z","last_seen":"2026-06-18T10:33:50.96672Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3517,"receive":390,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Anton\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.165Z","timestamp":1781778798165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Anton\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 18 Jun 2026 10:33:18 GMT\r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1212,"size_decoded":1134,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"96b5500f78d02a20737a104595841040","sha1":"1299a6bbcbdc4105462ce46d84180570bffb8a9e","sha256":"60f7a6eec04197f4e0cc89810815abe3d1712ef8fe9519ac4517bced2deb78e5","sha512":"037bf5c11ac28e4b5e0b235609746b692c5d876b0155edf21f5b20c2a3f94fff7534e115a8cdc82ffd6c3664cb2c9ecd24b59ef39d995da17dfa49c50dbbc01e","ssdeep":"","tlshash":"9121fe91043ba100da974cc123df3d3aee8ea1856045d47d5ffe08cc9c5bc6a235870c","first_seen":"2025-09-17T10:05:41.613868Z","last_seen":"2026-08-04T22:13:07.924889Z","times_seen":1915,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":48,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/style.css?v1=8.0\u0026ver=7.0","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.175Z","timestamp":1781778798175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/style.css?v1=8.0\u0026ver=7.0 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V0DYdoOU9e1KWPgd0t7BADn1eZ8%2BQCiLbbJDVtUoZ%2FFR5QgqeqyddeoNk9PoUDOd0gZ3E44u2upcyRDyQO69cxs4XoasRYusfTwBFgn%2FRemUgwYxQNtvlN1jQb%2Bz4QBxy6B%2F3wVx\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a0d9a29099f223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103884,"size_decoded":20064,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"143c3a84c8b7b1605632658daf54e8df","sha1":"9c4cc1eb2961ad83d27321a1eb769dd38dc6b075","sha256":"9b6bd77329fa9b26daa3f7cbeea73cee748eba3a6cfad0cab9e255bcb6271789","sha512":"3900dfe7be8605c40cb63da02c5dc13d11578b9e08be55a8bdd2efbbc961682ae8c86c26dc3ce88378f9d2da6b65dc7341a8bff4485afe44dd3f808f7a377502","ssdeep":"384:v0YPcmke/re/7E7L7SeUrviQj2sKZaiKoMk1aEYPNrE8uuhnzbYcvUppeQOCdSf3:vbJYmHOvqWdVGcplUW/HNCa","tlshash":"61a33358da011006723799f8afb26756d7985083cb0683fdbfd97244cff61a89662f8c","first_seen":"2026-06-16T05:47:51.703731Z","last_seen":"2026-06-18T10:33:50.968564Z","times_seen":4,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.216Z","timestamp":1781778798216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:20 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:24 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWxwCzIY%2Bilsp5txbWnWWwoePFnFZHldkuBXmvgnAZngm8MFIr5KMKXwTp%2FDUfNuvA3lkBaPRi60klnlX536QZtS0ANLtRZmxyiv5OZY%2BgfhvgBhjPsxDA%2FPmkkoLraNo9MKOGvR\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-length: 600\r\ncf-ray: a0d9a290ea5d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":600,"size_decoded":1275,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"2878f64a0217a154e531853f6a822c65","sha1":"ac7a53e9f53b9de8a344c38222e217d50d559b83","sha256":"3f47c75fa68e49b1cdca50c61e9cd6603b57c521e5e6809df59a4a15e291a4ef","sha512":"0885bc73e9364c2b3c3730dcc5430e74bd17c3ab84f85a0ff33002bbba95f6650622650bbac35b05505978b58d98584f0c78b6a471e6449d33e333729c1fa0dc","ssdeep":"","tlshash":"4cf041d5b4c5323ee76f489343360bf1fc7080ee9901ac8ead0948191e6106ce74b201","first_seen":"2023-04-08T02:38:56Z","last_seen":"2026-08-05T14:28:33.71395Z","times_seen":15211,"resource_available":false,"data":null}},"time_used":2503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/images/logo-w.png?v=4","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.229Z","timestamp":1781778798229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/images/logo-w.png?v=4 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:21 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Jun 2025 10:08:00 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y18LlH6l%2BqwkmRiJ8JoLKE5n5s6mlP8tTlPb5EvT0V4K4jzeDaNjzHPr%2B0dvvT88cWo6lyoBhtArHDboZJRg9Hwaz4b9ZEgPmb%2BHigLJTb2GWhpoMkxP%2FfiSJo4Zx4K8OxpHfbg9\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 64628\r\ncf-ray: a0d9a290fa6723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64628,"size_decoded":65298,"mime_type":"image/png","magic":"PNG image data, 2254 x 613, 8-bit/color RGBA, non-interlaced","md5":"e83f844bff510fe780122f624a42eda7","sha1":"3c84997885a866842bc48a39ba4628816a1ffc77","sha256":"27f6fd4bbdb56e29a09632a21b3905ac153dc83ba1e11707daca7baae78f1bb5","sha512":"f221340999467a93c8c9cac9df3e1eb2edbf5f7496ef8faab47dcba7f250464946e704cebf6330d978498c92185b15dd3c6865a37bc07e45ff912e412fb12f17","ssdeep":"1536:EcJL6iwIo70u1Ng5t4OqFb585ma++2BGgbVzqt+QdWQYOtY3+PP:nEiwI6VaBg58lb2BGGVFQ00YO","tlshash":"d7530177a8311820f6d9123d5de90ba90a2d4f7301c1225b9ff9dcb8dec25e586e38e5","first_seen":"2026-03-05T21:36:35.893184Z","last_seen":"2026-06-18T10:33:50.970171Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3478,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/images/hero-background.bb0340f.jpeg","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:20.999Z","timestamp":1781778800999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/images/hero-background.bb0340f.jpeg HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:22 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlw%2BHr6ZLdzCcNhQBG%2BpCuapopAbNSEGrnRW1i279CKe3L7csAO%2FwVi0hC8RHyC8ENMyeeSt2wT6EFK%2BCYOHBoSr039Z57yanAt4Jm5a7MrGywHVil0yyYAUHSdNa5Z02Wpmcy65\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 74226\r\ncf-ray: a0d9a2a24d1923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74226,"size_decoded":74897,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x600, components 3","md5":"bb0340f44b478712918156fed1f0af28","sha1":"410bd2c0291f0bc8dc3562e645c897f132244df3","sha256":"db64ce74af60987e7dd751fc9994efa6852f363bc58c1e5c0ecc3241e5bf364b","sha512":"2504706e4a24fb55f1777ef26c37e7c6b418c52ce5a2a628ee9505cc5271343561aacdb680b6fd3d93de7b9e504e1738251c5f54f5c01778f6e66d74bc07d47f","ssdeep":"1536:165Q0EdcDMrCVXDqMM/wjx6tj8kM1SgbZJnLhrRBALt6IY7:50E2MrgWJwjm21SgbjVrRBAbS","tlshash":"f87302558b71ebf2e4b083b3501b67697aaa1f3c3ecb06a291640e61a183317cfe5547","first_seen":"2026-03-05T21:36:35.866168Z","last_seen":"2026-06-18T10:33:50.970994Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1714,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:22.019Z","timestamp":1781778802019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:22 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Jun 2026 09:47:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0ECAPIk9BkqczX6Tzfy8mzxjRPNeO3wgDCNjzW8LsSKFR008%2Bzowwf3olStrhXWVV5YK1PlYTub3ToyrM2WVzAowrfJM2ZgA%2FWbQRfWv6CgDWLXqAnUtTnJt%2FB511fs7tVb95kb\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a0d9a2a8adce23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":6227,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-05T16:01:54.886615Z","times_seen":310283,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T10:33:15.779Z","timestamp":1781778795779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:17 GMT\r\nserver: cloudflare\r\nlink: \u003chttps://www.strath-well.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://www.strath-well.com/wp-json/wp/v2/pages/12\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://www.strath-well.com/\u003e; rel=shortlink\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NlgB2GMWUSD7K2kCO0kBU5frbLtlCJn8k%2BvwSM0W3IQv0nkgCggA0D%2Bow0YgXQr6PSyUci6jVnIOmWECdzzMJ5eOyyxU9%2BMG4VGtKSnU4etlulPLJYZiPUQnjCQThvpqY%2Bd6EEDM\"}]}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a0d9a281af5623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Max Mega Menu:3.5","description":"Max Mega Menu is a popular WordPress plugin that enhances the menu functionality on WordPress websites.","website":"https://www.megamenu.com/","common_platform_enumeration":"","icon":"Max Mega Menu.png","categories":["Widgets","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WPML:4.7.4","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:6.0.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":128482,"size_decoded":20316,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32658), with CRLF, LF line terminators","md5":"fdc31e71b1d50c430038c82d14564fbe","sha1":"5142db415787ed001ce453bc223f1df1b0e965fc","sha256":"000c0e7f2642ef6f89969af9c2cea67a5b2dccb37f39b7d8145364e6e9635f4f","sha512":"f3820e91955a8930207df97112609d6465cb58e0b1585d73d508a373da9c8eb7879574b24d245b857a298ea66ec413288177af520e7f695df7ece946a599c372","ssdeep":"1536:onypYCAqWFRF4dHFD6EP4KORWLCcxGO89gmUEsWhTz:oydAqWFRICcxGOigmZsWhTz","tlshash":"5dc30a7690e0043a0137c7a8daf47368c69dd147d51a4ace73fe23295fbbd92a19b309","first_seen":"2026-06-18T10:33:50.972173Z","last_seen":"2026-06-18T10:33:50.972173Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2105,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":1915,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.169Z","timestamp":1781778798169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:19 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SEfIlOXZ1vDslliA0k1%2FPvo1%2FFzX5GnxhlIsODKLqesdc2YJn2kzmiZ8dx4AqcLf%2FJXC8K8FKRR1ficnQIkXhmj%2F%2BDSc9BnjibCzl0oPHfTfCukagB5mFMNcBoBzopDyLsfC3T0n\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a0d9a29099ed23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258,"size_decoded":793,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"886011711ae972cd8472eef5eba5c298","sha1":"6e52e59dfcbe911b4ab1a69036e1e3b930030c7e","sha256":"4b9257e3e9c959214ddfab833a69a021ae6557403efe76afcbee259621175274","sha512":"5e17e37f001b253f9d78cfb212966299d30f99494a36580447d2a420a19c32f0d7c629e3081b9a7a8c5d63ac263a47fd907ad24c9642a66558c790d2f4b6b4d6","ssdeep":"","tlshash":"c2d05e50cad26638e812a055188843712bc01f28cf9297036e1b2b2fd81636bd8b34b0","first_seen":"2023-04-06T22:11:30Z","last_seen":"2026-08-05T15:37:54.599982Z","times_seen":21473,"resource_available":false,"data":null}},"time_used":1544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.189Z","timestamp":1781778798189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 18 Jun 2026 10:33:18 GMT\r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":2611,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a763918f3b1cf01f5127eaaaa4e5ed36","sha1":"e5932e684c5249dece73f827719829b05315deda","sha256":"316e33bfe6ab63fbb1920bfcf23774c4a779aa22c0707c7831064f9a1bb87c43","sha512":"adeeb53b0a7524e78f035b88e7993fee8484360c90ce3e6d3d69536ebf2aea3dc5d1cd45a94f0dbf8ce9ed4989351a1258ae07663871bd407bd3baa6b33d7f0e","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVK7:Xxyllff","tlshash":"04e210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:46:21.252973Z","last_seen":"2026-08-05T10:14:02.894656Z","times_seen":2685,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":52,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.6","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.197Z","timestamp":1781778798197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.6 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2xeTOEJMqBzsejIHAMy1y4pGaf8pAdSX0%2BT3Yx%2BNdxt6TlUn7ZpWBE%2FoMV52RU%2Bv4vQL3yKZ%2B68Uc%2Bl1DlFMBTUqJh9fNovx%2B5%2BxBJX1KblJtx1wy7He1NM8gUM9fIZxBTs8SY%2F\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a0d9a290ca2723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":5168,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-08-05T15:58:16.427263Z","times_seen":231571,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.5","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.203Z","timestamp":1781778798203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.5 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:21 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2FoIE3UCH5f2A5d1u1rPj1%2BAVU2jxf5b28tQsc%2FvV9ijE7Pw4T2j15esK5xxoOAQ0oe%2Fqd46TfZfhvFZZ18DKjcs1ZvdrBKOfB2mwBorCGq1bTZpREqK5dVeVQSBolLr%2BO2z9r69\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a0d9a290da3e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38860,"size_decoded":7900,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (315), with CRLF line terminators","md5":"07ab1a6d9bb58aebbe0f1e1ae54902ff","sha1":"a483eb24f35775fb63755ee7caf5429852c6b177","sha256":"ef8df1e036642fe0c89e752645c2e70fcd80874342516b887987113955c4f033","sha512":"180f52004498efbac209c1277679a61f34e1bcb7703020a0175f1842f3f12410f035ad9d72426263ae90e7c053d0bc9b3395e56f68022dd492113a68af0bd9d1","ssdeep":"768:qJKuQzcvTQ7k7bUxL7ymsyR1goTRDRAR/RCRyRgRYRIRp:fGylTZuhk0eSCj","tlshash":"a1030b89b0ca1ae384bfb738eaea9168e76a06b34245c6507dfc84441f7745052f3f9d","first_seen":"2026-01-08T11:10:22.991575Z","last_seen":"2026-06-18T10:33:50.975715Z","times_seen":5,"resource_available":true,"data":null}},"time_used":3595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3520,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/images/logo.png?v=4","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.214Z","timestamp":1781778798214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/images/logo.png?v=4 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:21 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Jun 2025 10:08:00 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9FsMp3u7BNvBL9i8RJUfC0YPM5V%2FUvInjpXDhSJLAf0r7pmG7YHb5UZ38T%2BvWVwPDrMjyMByL5shTefNU8NMBfWSNd%2Fe%2Fq3ZTFyTfgWo%2Fs3PAdcK4%2F25G78n2Yl0OW9okRK2e93x\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 137147\r\ncf-ray: a0d9a290ea5c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137147,"size_decoded":137822,"mime_type":"image/png","magic":"PNG image data, 2254 x 613, 8-bit/color RGBA, non-interlaced","md5":"d456bbc381a38cf6cd395aa7c491b983","sha1":"2ba55f96ace636b68249ca913b353ee9d9cb1122","sha256":"5136a45c8bdecf0a995cf6e239f592e8002efd12e1df901bd7ff20024d991fe6","sha512":"5aa215de32ab207a89d2583c3f991cd1e3608bd5be68e3d7dfa0169686d34ce16e8d137a9308d99d587037965778dc8131a6d99e4e87f3ab46fc851529813836","ssdeep":"3072:UpbA9/VCYM6YNAlhbg51wDOHjK8KjVs7O5I9Z:qAJgYM6YNEq3wDK45u","tlshash":"e2d3122ddd5fc8e5ce6f817c44e8727a336e856590003d3e4ef9722ee86413d322a65a","first_seen":"2026-03-05T21:36:35.913191Z","last_seen":"2026-06-18T10:33:50.976227Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3748,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3515,"receive":233,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/fr.png","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.218Z","timestamp":1781778798218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/fr.png HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:20 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:24 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6JezbZfDqXQpRrO2rjj1RxrJziX%2BMGbuH22dXQ4TgQ40ttgxff6T7gVm5nCJMiellCTaeq8iZ%2FNfaoVsHFl%2FX2zWKPcYm8c0mTJGZZJp0%2FxZvbm1wzJewEKTr%2BMQHbbP88ccCyXk\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 268\r\ncf-ray: a0d9a290ea5e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268,"size_decoded":938,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"a6b419f8502fa8faca4c693b46989e2d","sha1":"fb3862465a32facd5b5e158b0544b567a01d343e","sha256":"9c86c0c02ccb446b1a50d0282f4d9715e45670be443c4c3f666c263601e36274","sha512":"eaf4f334519babdddcc868dbe9f813595863a8467072eb0d4fc7b9b26e2a201bec6cca72cdd63630544158466b8628781a5a72d4b8578e36d2f9ef22ba2389b1","ssdeep":"","tlshash":"90d02bc14d685ae8e15b849a13bd16617122099e50a94d26d41584c50c2c4f475cdb58","first_seen":"2023-04-05T15:13:06Z","last_seen":"2026-08-05T14:29:40.053982Z","times_seen":5421,"resource_available":false,"data":null}},"time_used":2683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2683,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Ramaraja\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.188Z","timestamp":1781778798188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Ramaraja\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 18 Jun 2026 10:33:18 GMT\r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":722,"size_decoded":1030,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f8b87a0d2b05ce309b1e5a6363557957","sha1":"18b2ec8310748060f5e0eb422bf7eca274872a9a","sha256":"e5ed278fc9a718a971c4bd9798049accd52a9c82ec7ab863d61f848e2308f6bf","sha512":"4bfffe75d55ffb9601cab9cdeb20db0e17cc0c8b45865ddbafb20d4e598c54ab6ad9630f7284ead2f72d212225335c34d6e1d086a464be126bfce9056abd8205","ssdeep":"","tlshash":"48014c810417ea00fa932cc212cf7a3a9d0f21946080aa6a9efb14d47c55c274352b1d","first_seen":"2025-09-20T03:52:06.319959Z","last_seen":"2026-08-01T04:40:45.790077Z","times_seen":60,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":50,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.193Z","timestamp":1781778798193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Jun 2026 09:47:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=69i2L5l%2F8Pa%2BXg34z4aHDo2djBJ7hQKkhsHQDY%2F7v39mgbJYvX5vkccniEdzM75YkmPoZtJT%2BrK%2BkBKWAHsn0jBpXUBVb94c8AR2FEZt6ECnGmZafU8F%2BLcRSjBk1DXICD1n1qmx\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a0d9a290ba1b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5697,"size_decoded":3190,"mime_type":"text/javascript","magic":"data","md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-08-05T15:55:30.049305Z","times_seen":36892,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/images/section-1-background.9527e52.jpeg","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:21.003Z","timestamp":1781778801003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/images/section-1-background.9527e52.jpeg HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/wp-content/themes/theforest/css/tw.css?v=2.2\u0026ver=7.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:22 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMpeJDD8H%2F9mlT4XwXIf%2FJcozumvEAqg2Al1rDB%2BdufvAM9rhM2VxgT5Z62M1x7w5H4yJllKSg9R6%2BTTZ8Aax0bArDggZzVsLnnjMzxcAEmISjl%2BsJEBmDFgncs16hM%2BcgnArQSA\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 31586\r\ncf-ray: a0d9a2a24d1a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31586,"size_decoded":32261,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x661, components 3","md5":"9527e52620f9457796b5f11e544f2b32","sha1":"2f0861853146746eabf3f2afd288ec496dd65fe5","sha256":"75e56abd952f9e1f2893a17ac4487200cb6a03a9947ddd8550792343ee129288","sha512":"b00340c7947831b5c1764999cc1b58a1de98b0f7d8066c14e40315a08820172f0218702c5d3ec08a246615c3ebb36007c06ccebaaea613c03d4d5553bd30f628","ssdeep":"768:acbulQ4vM2B2ZgEUGzXkl9ehk9JiZvk+2YGS:3buo2CgxAXkPehk+aYGS","tlshash":"17e2e1496b931c73c0d580799afa4b01aac547387504e713ab2b353bdecd8e2c8f6b19","first_seen":"2026-03-05T21:36:35.837899Z","last_seen":"2026-06-18T10:33:50.979565Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1773,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1715,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/images/shap-circle-background.a96b39a.png","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:21.005Z","timestamp":1781778801005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/images/shap-circle-background.a96b39a.png HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:21 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CANG8okCZOFBH1aAyLWBUNqBR36xa%2F92Sto%2FOKwW0eLaaON0fZTYdfdsLU8xWuKtLZAjNqgk5RfGujojW04znP3sKp14qB5ZgmiIPc2UauykLo9K9iNHOEcunfxCvKf64BMLrm9B\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 79876\r\ncf-ray: a0d9a2a24d1b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79876,"size_decoded":80542,"mime_type":"image/png","magic":"PNG image data, 1920 x 320, 8-bit/color RGBA, non-interlaced","md5":"a96b39ad9d762e3e9b1a4deb3880b068","sha1":"392a4e3fdade977950cccfc54f6b8d0ed9238d56","sha256":"d168bfb80905607b4fa3f838d01d5a63e1ff310e3988a4ac0b57294535e9e58d","sha512":"c996fd9ab13f5328006c74a863bb4256f5aa22a63832568420c75eddc02a0a2b4127e1bcd1712d8895e9a229c094511272e57c07d83eb0f08ddcc49491e96740","ssdeep":"1536:1nZBUXYdFb8FzMiwgwjX7HBAVJqRk5jqd44TlO4IDh:1ZVFbCoiwggl0J4kp+lO42","tlshash":"29731235c93a6d0ac02b097682d09a3efd687dfbd171c7e7c1a4db4af941ac1069a943","first_seen":"2026-03-05T21:36:35.915368Z","last_seen":"2026-06-18T10:33:50.981324Z","times_seen":5,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/images/footer-background.49dd9cf.jpeg","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:21.095Z","timestamp":1781778801095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/images/footer-background.49dd9cf.jpeg HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:21 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0fSjJLIlZmV3LVgNfORHuUS9olELMLN4egVvbnsl%2BAZL0xfCMh77SzTFSM6TL8Az9UkB8TYObx60hmfAsUgSu14BnCfTPX8R2%2BCLlBzt2mRNCTkyVUqvGtykyqX9GdSPxpmhLe7l\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 6082\r\ncf-ray: a0d9a2a2dd2423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6082,"size_decoded":6748,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1921x406, components 3","md5":"49dd9cf3f5b428c1eb8268ae9a9a8d88","sha1":"10fe655ccd27a0bac0b2d3c9188a05146f95790f","sha256":"64bf3d4850babc2d13e54fc4e4e1d7340c0e16d7d32da87f53dfd2b64ecc0518","sha512":"bef38647a01ff2dadf44d4f922d37c928b0a4778da64ba3390575e282e49dcb56551d8bd44fb0c9a1bfae3a9ff7831b43785d4b7732a3ffc1664341164bf653e","ssdeep":"96:tW8GpW8r2OfQ/gt1x2F1vMZ98iO/t0cdR+m4BFf5gB8tOoEBlSB:fP/ib2PvMguc74BB5gOlEvq","tlshash":"40c19d358f480278c5532972ab5f176a0f77f423eb1cb006b707a561b9074286f8c2bb","first_seen":"2026-03-05T21:36:35.908479Z","last_seen":"2026-06-18T10:33:50.994206Z","times_seen":5,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/themes/theforest/css/bootstrap.min.css?ver=7.0","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.173Z","timestamp":1781778798173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/themes/theforest/css/bootstrap.min.css?ver=7.0 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:20 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vwVyHgAaZ%2Bor%2BBdguoUFs5YXanJnt6sryWRERzz2S1LBpkiug9b7VpfdJ2f0g%2B2LUBfxt%2B06mePokH1PGw0bRwjpCkmvIU%2BxBwmRrdtrdQFRUoGH%2BU%2FAZKBkptAjwWqEKFbgUaQS\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a0d9a29099f123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311835,"size_decoded":40464,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"ceee4e23ab694fa3a9f6938e51b86705","sha1":"f422a96def7b7be66f95ad5c88fa664a541188cb","sha256":"326d5c5e31cafa8f41744fc610af5a9abaea6ae5fab30ceb939de8fd930a68f2","sha512":"a0321fd48425545def5f826864c8b3a507c67061d9f672397b6d0a7e755dbafeea95861731aec91e3d3f9601d87f06f9ad775fb7a2b5fd419162d2038a6f9560","ssdeep":"1536:hAudRzSKUPmlrm6n5HW+orJ0lDeL978HU1xL5RNTxtdLfzYGQE:/SKMr0ipg0ntxtdLfzYGQE","tlshash":"db64516ee840346a0d339779a7e7aeaafe7d10d7ca008564b9cf23144fb52d15c61ec8","first_seen":"2026-06-16T05:47:51.691888Z","last_seen":"2026-06-18T10:33:50.995399Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2231,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=474000","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.179Z","timestamp":1781778798179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=474000 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRaWd3jmu3SjWScV3XhbqGGYOPS6hJrAFuqeUyoZnwf04Vq3XtT6mUSrLYqX1ZEhO55RhXOFVImdqqaKdcX6Mnrjw1G8ZqAd4xUzbsECyTLzjyIJlm5%2BpWFwXkpgIRms3ok1SOZb\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a0d9a290a9f423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295,"size_decoded":847,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"cd958223d1a1703cafd2e98b997e7c80","sha1":"b2eb9fb7829b119db8e6261f5301d81a6e60d5bf","sha256":"ced75e292d9d105f83a61c1eb775f9a7905b5dcf776d183eaa566ef640a62157","sha512":"52035009026ca027ca0aabd1be36bc51372080645e296e50fa97278d16ad7544ae4a62872704e8428fa719d7dce4aa444d07c7e50c516f6e886d45aecd7d2b92","ssdeep":"","tlshash":"ace082183bdc062c0626731037bee6802c3431597082908e8388f4b419e4a23eca88b3","first_seen":"2025-03-11T03:47:25.451557Z","last_seen":"2026-07-01T10:50:16.08016Z","times_seen":162,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.6","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.196Z","timestamp":1781778798196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.6 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:21 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8b3ojKK1FnP0sxIaFf%2BXRc6XMu1tPiGX4UhAdklrCOEEmuRDtlcZfMMkjtN5HyBpk9hRJE4Mukm70YBzjNWAM4KVpbwlzpMwpR5Ka8N745a%2B6Z7%2FB1OjVnxrUXQzjllD6%2BpsEB5D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a0d9a290ba1e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":4410,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-08-05T15:58:16.429969Z","times_seen":224305,"resource_available":true,"data":null}},"time_used":3603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3529,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.202Z","timestamp":1781778798202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:19 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Jun 2026 09:47:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i5N%2FTxadxKecOGE%2FYhKMeWoAiCxxt67oERCOAF6KhStWMSg37yHDjOGsQSmqzpQ1DP35TNWBz%2BKbFZfw51VeMzFqH7g3B%2BWvvMVvxS9PixrogZEBjcCeKKC4%2FFfLm3RfC6fWOxiW\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a0d9a290ca2f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1499,"size_decoded":1397,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-08-05T15:57:10.370395Z","times_seen":87251,"resource_available":true,"data":null}},"time_used":1500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.strath-well.com/wp-content/uploads/maxmegamenu/style_en.css?ver=045a41","fqdn":"www.strath-well.com","domain":"strath-well.com","tld":"com"},"ip":{"addr":"172.67.157.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.strath-well.com/","date":"2026-06-18T10:33:18.171Z","timestamp":1781778798171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strath-well.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 19:48:54 GMT","end":"Sat, 22 Aug 2026 20:47:41 GMT"},"fingerprint":{"sha1":"40:D0:76:94:67:CE:A0:76:F0:61:88:22:01:25:D4:3C:98:56:F7:7A","sha256":"E9:8F:06:88:A9:DB:88:63:11:7A:DF:74:4B:76:F1:94:36:4C:FD:59:0B:EC:5C:2C:62:DC:66:D2:A7:8B:28:E9"}}},"request":{"raw":"GET /wp-content/uploads/maxmegamenu/style_en.css?ver=045a41 HTTP/1.1\r\nHost: www.strath-well.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.strath-well.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 10:33:18 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Jun 2025 05:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nH7UX1Zkn125kX2gbyoxqAYUQYyFQUyrX%2F607wweIcuR%2B111tmeq%2BQMNCm0NWAC1d8xsvReCUxvzE0PDBcg06sx30F8aVVp69lWcmgnfTuzlSCijkhbGMc87AuB338ffAhiOwkDN\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a0d9a29099ee23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70470,"size_decoded":7732,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1131), with CRLF line terminators","md5":"73e30611f2201054cefa2b4de5faa898","sha1":"95057926d92e4731aa37d4d2d34e6e684b8f12e6","sha256":"c9839588b8c8b3c010f3363f09412b813d27ef868c2fc481d22b20a95742a535","sha512":"405c9f24d42a9b922e9d2f49355ba28a6f2b6ecd918f96f10aa28e99ee5b53e78132d8ca7eb6c8b9b988346609829f92d149d15cc207416ca6aba4279573e69c","ssdeep":"384:qQL7FOCE1JDjw8q4fYcQNsrDYRJ0M0t6u15oxDE7sHZeV3EV8DjjrJd9OA39pJ9K:+CE1JIgyE7sHZeVKzw59W","tlshash":"ae6315ce49c1c2d841bcce28e6cfe0849bd156f9abd5e847b5f9d447ce8d1410afaa42","first_seen":"2026-06-16T05:47:51.69054Z","last_seen":"2026-06-18T10:33:50.999594Z","times_seen":4,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"www.strath-well.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
