{"report_id":"2ede9625-e089-4b98-87bc-2bc44214ad02","version":0,"status":"done","tags":[],"date":"2026-07-19T15:00:20Z","url":{"schema":"http","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"title":"Secure Email Server :: For","dom":{"size":30240,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6974)","md5":"5e4ef41d5b8bb85c4a2337c7bfe7cdaa","sha1":"31c901d6677b05c2c1f1ec2eb19b6461b926311f","sha256":"45f4d19bf180ffb8c4480a8ec6f162ddf44ed3411fe5746412aa87ee3e4e516b","sha512":"7e9a569b2eaa5f0b6a77926845ff1d137c3326d2ced0f2b7d05fec43b6c43ae91494ef76d8efd29484f7451877df6fd84993ed683e6b6cb7430616307325a1f6","ssdeep":"768:J7X0MoiUrP8SRbBC5tJxEXXEzmUhYmF41Ta:JX0MoiUrP3gt8Ea1Ta","tlshash":"80d2ab3cb891c0bde4bb096bfda56d89989c0f12d6c9578800dcc57c2bf8faa21147d6","dom_hash":"domhashc7d86bb9d6b8a9b2867dc2bb381ff071","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-23T15:00:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"roanokethaimassage.com","ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2015-06-10","domain_rank":0,"first_seen":"2017-06-29T14:56:13Z","last_seen":"2026-07-03T09:55:18.228805Z","alert_count":39,"request_count":13,"received_data":99696,"sent_data":7011,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery UI:1.9.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"favicon.ico","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-10-24T00:07:01.702116Z","last_seen":"2026-07-12T00:48:10.111431Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":529,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b89b32721c1b2571f1cebb3cec111ab","sha1":"69d28c9475d3963bee1735e15e6b59546ca8ffee","sha256":"c756affc955028e995b3f5d2477d4f6a55840c48473505767312e36144848b62","sha512":"eddf597abceb2db45cfb83352c853791197d583efeedc5bc84a0ceafa46a80be94335158a833189d0a42f8f84cc8cc992e880b1c8074afa24aa6252c19d1fed3","ssdeep":"","tlshash":"5251fe3c75a1d09ee43a0e3beeb53965e4640f57cccda788049480a82ffce6e74186d6","size":3060,"data":"","first_seen":"2026-07-03T09:55:18.684955Z","last_seen":"2026-07-19T15:43:56.800423Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f3ed621687d785c8f4713155201d1d0","sha1":"b6fa6bbbad077b53e5ce1033a7fd626221060f55","sha256":"ccdcdf55e9c0d15012228dcbd76c83b8a6c8f833618d73cc3be3df880ac282d5","sha512":"47cd3cc3648c924c7a04e812506eab183edcf293664899a0b215553e2f84895b3d014690b612c2877796f8e7749fa8a3b29cb7d9b8113b7e22d232f01f3aa26e","ssdeep":"","tlshash":"f84167551d0301275ea301f62cc91a8d3b1801016410fd0bf89f96517fe1fb1aafb7b9","size":2083,"data":"","first_seen":"2026-07-03T09:55:18.68607Z","last_seen":"2026-07-19T15:43:56.801095Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3565161bba95415b949c2543f32f137b","sha1":"0abedab117325a815f5609f8360ba4bcab41543a","sha256":"24b30c3c75945343e1452e5da6f4d63ec5931a92f9b6300104c5a32e5f1c08c7","sha512":"0f0505332034eda21a80dbdd67254a2c16d00273906f2e0a7890458e0808e983b24930992e2f2fbddd7c52c1a3e4e32ccbcfad93a6079cd70010d01799d53994","ssdeep":"","tlshash":"a0114938a1f1a4ad257f462bedc66a2558884f26d2ce535801fcc9bc76f9e093210a63","size":1087,"data":"","first_seen":"2026-07-03T09:55:18.686923Z","last_seen":"2026-07-19T15:43:56.801891Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b7905a91a00eb9d0bd267d9f74c1d2a","sha1":"6698605381f55ea6d4ed600b435668a01309b3b9","sha256":"d600a936a9465e2778c5931b5013ba6133aeb61e4494956f2b80c90b0bd41864","sha512":"8b1476e87bf670c1eb67dd10cc0b5fe7be2783cd3f7f0b4521673300e5d5f8477812e7b07d67db73fe07abe448dafe2d9278e1d4e1d31db12745cc93ec43fd96","ssdeep":"","tlshash":"fa21f43c7ca1d0eed0ba062fedb8295564550f5addcc978804dc955c17b8eaf7008bd2","size":1156,"data":"","first_seen":"2026-07-03T09:55:18.687801Z","last_seen":"2026-07-19T15:43:56.802654Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"84956c36cf67787b3dee2e7577c3f79a","sha1":"a4b69badb8985affce22de432cf48ad7dc49560e","sha256":"7f48d2184f241247ceef2e62077d25b77d2357cf4ed09989927a8072dd6733a2","sha512":"38ca0c5e0f791b98683449742967cdf6fab5820c2947c2cc00c166383911cabb19011cf59ca4b94aa8bf24735b1af9360e7df8c5050335f572cd10b5d58b7673","ssdeep":"96:Paw3zpePk34000u0005PVnrVqVQgk3pzpK4000UNVnrV7Vwu4eCPk3EsvVnrVqVO:Paw3dY000u000p5dh0007up1","tlshash":"97a1243c78e2d0add4bb066feda5295898590f56d9cd978800dc856c17fcfab3008bd2","size":4933,"data":"","first_seen":"2026-07-03T09:55:18.688566Z","last_seen":"2026-07-19T15:43:56.803311Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"84b7234c5332e56e8eb67c28519f6ec5","sha1":"26585a9beb61fd855eaed607906fcc121ac6ab22","sha256":"417c8fee70c2ffd214e6e139dc44d6f24b98db1db112848f2f3fd4984fea2343","sha512":"442394e1aab3d96a2d94943603689083d65e4c31b66e81612961995e680450e0996b1786169f74074802422e34d656fb9e49ca5504c976c4a70b458e0a3299db","ssdeep":"","tlshash":"1b41533878e2d4ade1bb066fedaa5915984c4f16d6ce478800dc867c27fcf5b2104bd2","size":2185,"data":"","first_seen":"2026-07-03T09:55:18.692956Z","last_seen":"2026-07-19T15:43:56.804005Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd7ca39fc66316f4ca4573dcd895c0e5","sha1":"df8e1d37872853514c853e499e861954af90452a","sha256":"1d01c0827f75de731805fc1d35bd2b6836725818acb8f3b4793f7853fdf1fb5c","sha512":"6a58b0a9d07172493992f616d6541ad3555b2980d3acbb518bae3e4b2dea4b86fffeabd0e9f2d53e262f30b3edcef021ca290f088fe660e1cc528eb403e06b8c","ssdeep":"96:PaqmjaNhpnUY2vDmhk3x0s/VnrVqVJV000EKsPk3x0s/VnrVqVJV000EG:PaqmUhp+a/000EzV000EG","tlshash":"1be12d3c74e1d0bde4bb0a7beda66a19984c0f56cace578400dc867c2bfcf5a7104696","size":6985,"data":"","first_seen":"2026-07-03T09:55:18.693974Z","last_seen":"2026-07-19T15:43:56.804768Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78e55772a67b805f429d030899c49f12","sha1":"3ab9381f2343a2089f43daf62b0fa5d63f6fc693","sha256":"5cb02fdda17638211ccc173c0952d576af901180689f95f0f51debcf0c3e39dd","sha512":"817ff150592d23fbacb3cb9b3fd8634a64909984a9ed4554841a84f0dcc1a989ebd6c2c3d751c4d156948c2564b51f2972cd90e9fb67ffa76b20587f7000dc3e","ssdeep":"","tlshash":"c2d05e6be2f4263009dfaaba10d746583520d956e951951d3c2c13a4cf1cf4b1936ebc","size":259,"data":"","first_seen":"2026-07-03T09:55:18.698382Z","last_seen":"2026-07-19T15:43:56.80628Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9654cda1361ab210823392a0b953785f","sha1":"580f0cb4051bf22f43f42dcf802274a8f1eecf9a","sha256":"2878a190a01e01ac9105858faac61a016a7c222cf09573dc7a28727128baf8df","sha512":"ec9e737cbc99e9a081423765cbcf9ee2fb90ea2ab22fa12c9504c9f256a36d0cdd8d961e0a4ad08425ecdaddf36372ef19965a06eacd7676f5aa0959db3bfabf","ssdeep":"","tlshash":"63f0e265e74f59a0da6b3179676b52c8362c430bf901d0043caed8013f2845fe365a58","size":654,"data":"","first_seen":"2026-07-03T09:55:18.69995Z","last_seen":"2026-07-19T15:43:56.805508Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/FILES/styles.css?s=1387973879","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","date":"2026-07-19T14:59:52.216Z","timestamp":1784473192216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roanokethaimassage.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:97:CD:83:AB:73:98:CC:AD:C1:E5:7A:70:B2:48:3A:E7:86:21","sha256":"60:DB:0A:6B:3A:F6:2E:82:68:59:42:31:FB:64:08:E4:1B:91:A2:11:3C:EF:48:8A:F9:8C:E8:03:3E:47:32:44"}}},"request":{"raw":"GET /yx01xa/mail%20update/crypt/FILES/styles.css?s=1387973879 HTTP/1.1\r\nHost: roanokethaimassage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://roanokethaimassage.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1999\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 19 Jul 2026 14:59:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5524,"size_decoded":2747,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (886)","md5":"4ee3a5ebd4b56066b34b81ab97dec5c4","sha1":"1918e124fe5532a137ded2a47d74263f1f34ae2e","sha256":"e448ec1f14ba5d303368ae9a0fa980896f2c247e7ecba6980839a9e5cfc9f213","sha512":"3cd1c3e6b5a062c05436331ef3b2680c048b246178c5f48d99e1b4937427d4687cbd806771e849306170bec25f7423e34621d6e476169fb60eefa9444acfdda9","ssdeep":"96:/EerKYIWVIFOWfKO36VvLb900kNvHm8UWZxiLOi8Q3tN3QKcE6ZD:/EROWfKa6VvLbfGf7ZgLpD1LqD","tlshash":"8eb12133ce1d881e16aac7657106300cc0579476ea81d7daf2fa40adb7d39e541a3b4b","first_seen":"2026-07-19T15:00:22.444376Z","last_seen":"2026-07-19T15:04:32.360379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/plugins/jqueryui/themes/larry/jquery-ui-1.9.2.custom.css?s=1399644532","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","date":"2026-07-19T14:59:52.218Z","timestamp":1784473192218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roanokethaimassage.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:97:CD:83:AB:73:98:CC:AD:C1:E5:7A:70:B2:48:3A:E7:86:21","sha256":"60:DB:0A:6B:3A:F6:2E:82:68:59:42:31:FB:64:08:E4:1B:91:A2:11:3C:EF:48:8A:F9:8C:E8:03:3E:47:32:44"}}},"request":{"raw":"GET /yx01xa/mail%20update/crypt/plugins/jqueryui/themes/larry/jquery-ui-1.9.2.custom.css?s=1399644532 HTTP/1.1\r\nHost: roanokethaimassage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://roanokethaimassage.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1999\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 19 Jul 2026 14:59:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":5524,"size_decoded":2747,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (886)","md5":"4ee3a5ebd4b56066b34b81ab97dec5c4","sha1":"1918e124fe5532a137ded2a47d74263f1f34ae2e","sha256":"e448ec1f14ba5d303368ae9a0fa980896f2c247e7ecba6980839a9e5cfc9f213","sha512":"3cd1c3e6b5a062c05436331ef3b2680c048b246178c5f48d99e1b4937427d4687cbd806771e849306170bec25f7423e34621d6e476169fb60eefa9444acfdda9","ssdeep":"96:/EerKYIWVIFOWfKO36VvLb900kNvHm8UWZxiLOi8Q3tN3QKcE6ZD:/EROWfKa6VvLbfGf7ZgLpD1LqD","tlshash":"8eb12133ce1d881e16aac7657106300cc0579476ea81d7daf2fa40adb7d39e541a3b4b","first_seen":"2026-07-19T15:00:22.444376Z","last_seen":"2026-07-19T15:04:32.360379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/FILES/jquery.min.js?s=1399644532","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","date":"2026-07-19T14:59:52.226Z","timestamp":1784473192226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roanokethaimassage.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:97:CD:83:AB:73:98:CC:AD:C1:E5:7A:70:B2:48:3A:E7:86:21","sha256":"60:DB:0A:6B:3A:F6:2E:82:68:59:42:31:FB:64:08:E4:1B:91:A2:11:3C:EF:48:8A:F9:8C:E8:03:3E:47:32:44"}}},"request":{"raw":"GET /yx01xa/mail%20update/crypt/FILES/jquery.min.js?s=1399644532 HTTP/1.1\r\nHost: roanokethaimassage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://roanokethaimassage.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1999\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 19 Jul 2026 14:59:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5524,"size_decoded":2747,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (886)","md5":"4ee3a5ebd4b56066b34b81ab97dec5c4","sha1":"1918e124fe5532a137ded2a47d74263f1f34ae2e","sha256":"e448ec1f14ba5d303368ae9a0fa980896f2c247e7ecba6980839a9e5cfc9f213","sha512":"3cd1c3e6b5a062c05436331ef3b2680c048b246178c5f48d99e1b4937427d4687cbd806771e849306170bec25f7423e34621d6e476169fb60eefa9444acfdda9","ssdeep":"96:/EerKYIWVIFOWfKO36VvLb900kNvHm8UWZxiLOi8Q3tN3QKcE6ZD:/EROWfKa6VvLbfGf7ZgLpD1LqD","tlshash":"8eb12133ce1d881e16aac7657106300cc0579476ea81d7daf2fa40adb7d39e541a3b4b","first_seen":"2026-07-19T15:00:22.444376Z","last_seen":"2026-07-19T15:04:32.360379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/FILES/app.min.js?s=1399644532","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","date":"2026-07-19T14:59:52.229Z","timestamp":1784473192229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roanokethaimassage.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:97:CD:83:AB:73:98:CC:AD:C1:E5:7A:70:B2:48:3A:E7:86:21","sha256":"60:DB:0A:6B:3A:F6:2E:82:68:59:42:31:FB:64:08:E4:1B:91:A2:11:3C:EF:48:8A:F9:8C:E8:03:3E:47:32:44"}}},"request":{"raw":"GET /yx01xa/mail%20update/crypt/FILES/app.min.js?s=1399644532 HTTP/1.1\r\nHost: roanokethaimassage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://roanokethaimassage.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1999\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 19 Jul 2026 14:59:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5524,"size_decoded":2747,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (886)","md5":"4ee3a5ebd4b56066b34b81ab97dec5c4","sha1":"1918e124fe5532a137ded2a47d74263f1f34ae2e","sha256":"e448ec1f14ba5d303368ae9a0fa980896f2c247e7ecba6980839a9e5cfc9f213","sha512":"3cd1c3e6b5a062c05436331ef3b2680c048b246178c5f48d99e1b4937427d4687cbd806771e849306170bec25f7423e34621d6e476169fb60eefa9444acfdda9","ssdeep":"96:/EerKYIWVIFOWfKO36VvLb900kNvHm8UWZxiLOi8Q3tN3QKcE6ZD:/EROWfKa6VvLbfGf7ZgLpD1LqD","tlshash":"8eb12133ce1d881e16aac7657106300cc0579476ea81d7daf2fa40adb7d39e541a3b4b","first_seen":"2026-07-19T15:00:22.444376Z","last_seen":"2026-07-19T15:04:32.360379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/FILES/jquery-ui-1.9.2.custom.min.js?s=1399644532","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","date":"2026-07-19T14:59:52.232Z","timestamp":1784473192232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roanokethaimassage.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:97:CD:83:AB:73:98:CC:AD:C1:E5:7A:70:B2:48:3A:E7:86:21","sha256":"60:DB:0A:6B:3A:F6:2E:82:68:59:42:31:FB:64:08:E4:1B:91:A2:11:3C:EF:48:8A:F9:8C:E8:03:3E:47:32:44"}}},"request":{"raw":"GET /yx01xa/mail%20update/crypt/FILES/jquery-ui-1.9.2.custom.min.js?s=1399644532 HTTP/1.1\r\nHost: roanokethaimassage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://roanokethaimassage.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1999\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 19 Jul 2026 14:59:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":5524,"size_decoded":2747,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (886)","md5":"4ee3a5ebd4b56066b34b81ab97dec5c4","sha1":"1918e124fe5532a137ded2a47d74263f1f34ae2e","sha256":"e448ec1f14ba5d303368ae9a0fa980896f2c247e7ecba6980839a9e5cfc9f213","sha512":"3cd1c3e6b5a062c05436331ef3b2680c048b246178c5f48d99e1b4937427d4687cbd806771e849306170bec25f7423e34621d6e476169fb60eefa9444acfdda9","ssdeep":"96:/EerKYIWVIFOWfKO36VvLb900kNvHm8UWZxiLOi8Q3tN3QKcE6ZD:/EROWfKa6VvLbfGf7ZgLpD1LqD","tlshash":"8eb12133ce1d881e16aac7657106300cc0579476ea81d7daf2fa40adb7d39e541a3b4b","first_seen":"2026-07-19T15:00:22.444376Z","last_seen":"2026-07-19T15:04:32.360379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/FILES/app.min.js?s=1399644532","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","date":"2026-07-19T14:59:52.845Z","timestamp":1784473192845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roanokethaimassage.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:97:CD:83:AB:73:98:CC:AD:C1:E5:7A:70:B2:48:3A:E7:86:21","sha256":"60:DB:0A:6B:3A:F6:2E:82:68:59:42:31:FB:64:08:E4:1B:91:A2:11:3C:EF:48:8A:F9:8C:E8:03:3E:47:32:44"}}},"request":{"raw":"GET /yx01xa/mail%20update/crypt/FILES/app.min.js?s=1399644532 HTTP/1.1\r\nHost: roanokethaimassage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://roanokethaimassage.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1999\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 19 Jul 2026 14:59:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5524,"size_decoded":2747,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (886)","md5":"4ee3a5ebd4b56066b34b81ab97dec5c4","sha1":"1918e124fe5532a137ded2a47d74263f1f34ae2e","sha256":"e448ec1f14ba5d303368ae9a0fa980896f2c247e7ecba6980839a9e5cfc9f213","sha512":"3cd1c3e6b5a062c05436331ef3b2680c048b246178c5f48d99e1b4937427d4687cbd806771e849306170bec25f7423e34621d6e476169fb60eefa9444acfdda9","ssdeep":"96:/EerKYIWVIFOWfKO36VvLb900kNvHm8UWZxiLOi8Q3tN3QKcE6ZD:/EROWfKa6VvLbfGf7ZgLpD1LqD","tlshash":"8eb12133ce1d881e16aac7657106300cc0579476ea81d7daf2fa40adb7d39e541a3b4b","first_seen":"2026-07-19T15:00:22.444376Z","last_seen":"2026-07-19T15:04:32.360379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"favicon.ico/","fqdn":"favicon.ico","domain":"favicon.ico","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","date":"2026-07-19T14:59:54.038Z","timestamp":1784473194038,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: favicon.ico\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://roanokethaimassage.com/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T14:24:28.807251Z","times_seen":17423368,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-19T14:59:50.926Z","timestamp":1784473190926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roanokethaimassage.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:97:CD:83:AB:73:98:CC:AD:C1:E5:7A:70:B2:48:3A:E7:86:21","sha256":"60:DB:0A:6B:3A:F6:2E:82:68:59:42:31:FB:64:08:E4:1B:91:A2:11:3C:EF:48:8A:F9:8C:E8:03:3E:47:32:44"}}},"request":{"raw":"GET /yx01xa/mail%20update/crypt/index.php HTTP/1.1\r\nHost: roanokethaimassage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 19 Jul 2026 14:59:51 GMT\r\nserver: nginx/1.29.8\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6648\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery UI:1.9.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":24206,"size_decoded":6874,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6974), with CRLF line terminators","md5":"d295edcf500aeba25835d4b3fbdab418","sha1":"bdbd3c0f8970faacda4dbbbe980f050cf09be7de","sha256":"9e45556cdc585d472bc6e523235beb3b5048a18be769c7a16e49858160c9ca30","sha512":"2e8c557f5158b0c37a4ff8b76550b5999f0dc7331401fac31cd7367978a4c2670c1a805f1db3d66916d7325d63093e328ab337b1a3bab71330c2c8fd44015b4f","ssdeep":"192:WaQoWnlifo50DA2ATKvhEG07laa000ESlOaRM8Xoaw3dY000u000p5dh0007uptX:k4f+0DA2P2TS2NrXS7xEXu4mUhYmFD","tlshash":"66b22b3c78a2d4bde4bb0a7beda52918985c0f06d9cd978800dc857d2bf8f5a31047d6","first_seen":"2023-08-22T13:13:26Z","last_seen":"2026-07-19T15:43:56.798108Z","times_seen":75,"resource_available":true,"data":null}},"time_used":1043,"timings":{"blocked":-1,"dns":345,"connect":153,"send":0,"wait":233,"receive":0,"ssl":311},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/FILES/ui.js?s=1382384360","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","date":"2026-07-19T14:59:52.221Z","timestamp":1784473192221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roanokethaimassage.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:97:CD:83:AB:73:98:CC:AD:C1:E5:7A:70:B2:48:3A:E7:86:21","sha256":"60:DB:0A:6B:3A:F6:2E:82:68:59:42:31:FB:64:08:E4:1B:91:A2:11:3C:EF:48:8A:F9:8C:E8:03:3E:47:32:44"}}},"request":{"raw":"GET /yx01xa/mail%20update/crypt/FILES/ui.js?s=1382384360 HTTP/1.1\r\nHost: roanokethaimassage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://roanokethaimassage.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1999\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 19 Jul 2026 14:59:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5524,"size_decoded":2747,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (886)","md5":"4ee3a5ebd4b56066b34b81ab97dec5c4","sha1":"1918e124fe5532a137ded2a47d74263f1f34ae2e","sha256":"e448ec1f14ba5d303368ae9a0fa980896f2c247e7ecba6980839a9e5cfc9f213","sha512":"3cd1c3e6b5a062c05436331ef3b2680c048b246178c5f48d99e1b4937427d4687cbd806771e849306170bec25f7423e34621d6e476169fb60eefa9444acfdda9","ssdeep":"96:/EerKYIWVIFOWfKO36VvLb900kNvHm8UWZxiLOi8Q3tN3QKcE6ZD:/EROWfKa6VvLbfGf7ZgLpD1LqD","tlshash":"8eb12133ce1d881e16aac7657106300cc0579476ea81d7daf2fa40adb7d39e541a3b4b","first_seen":"2026-07-19T15:00:22.444376Z","last_seen":"2026-07-19T15:04:32.360379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/FILES/common.min.js?s=1399644532","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","date":"2026-07-19T14:59:52.228Z","timestamp":1784473192228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roanokethaimassage.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:97:CD:83:AB:73:98:CC:AD:C1:E5:7A:70:B2:48:3A:E7:86:21","sha256":"60:DB:0A:6B:3A:F6:2E:82:68:59:42:31:FB:64:08:E4:1B:91:A2:11:3C:EF:48:8A:F9:8C:E8:03:3E:47:32:44"}}},"request":{"raw":"GET /yx01xa/mail%20update/crypt/FILES/common.min.js?s=1399644532 HTTP/1.1\r\nHost: roanokethaimassage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://roanokethaimassage.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1999\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 19 Jul 2026 14:59:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5524,"size_decoded":2747,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (886)","md5":"4ee3a5ebd4b56066b34b81ab97dec5c4","sha1":"1918e124fe5532a137ded2a47d74263f1f34ae2e","sha256":"e448ec1f14ba5d303368ae9a0fa980896f2c247e7ecba6980839a9e5cfc9f213","sha512":"3cd1c3e6b5a062c05436331ef3b2680c048b246178c5f48d99e1b4937427d4687cbd806771e849306170bec25f7423e34621d6e476169fb60eefa9444acfdda9","ssdeep":"96:/EerKYIWVIFOWfKO36VvLb900kNvHm8UWZxiLOi8Q3tN3QKcE6ZD:/EROWfKa6VvLbfGf7ZgLpD1LqD","tlshash":"8eb12133ce1d881e16aac7657106300cc0579476ea81d7daf2fa40adb7d39e541a3b4b","first_seen":"2026-07-19T15:00:22.444376Z","last_seen":"2026-07-19T15:04:32.360379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/FILES/jstz.min.js?s=1399644532","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","date":"2026-07-19T14:59:52.231Z","timestamp":1784473192231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roanokethaimassage.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:97:CD:83:AB:73:98:CC:AD:C1:E5:7A:70:B2:48:3A:E7:86:21","sha256":"60:DB:0A:6B:3A:F6:2E:82:68:59:42:31:FB:64:08:E4:1B:91:A2:11:3C:EF:48:8A:F9:8C:E8:03:3E:47:32:44"}}},"request":{"raw":"GET /yx01xa/mail%20update/crypt/FILES/jstz.min.js?s=1399644532 HTTP/1.1\r\nHost: roanokethaimassage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://roanokethaimassage.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1999\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 19 Jul 2026 14:59:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5524,"size_decoded":2747,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (886)","md5":"4ee3a5ebd4b56066b34b81ab97dec5c4","sha1":"1918e124fe5532a137ded2a47d74263f1f34ae2e","sha256":"e448ec1f14ba5d303368ae9a0fa980896f2c247e7ecba6980839a9e5cfc9f213","sha512":"3cd1c3e6b5a062c05436331ef3b2680c048b246178c5f48d99e1b4937427d4687cbd806771e849306170bec25f7423e34621d6e476169fb60eefa9444acfdda9","ssdeep":"96:/EerKYIWVIFOWfKO36VvLb900kNvHm8UWZxiLOi8Q3tN3QKcE6ZD:/EROWfKa6VvLbfGf7ZgLpD1LqD","tlshash":"8eb12133ce1d881e16aac7657106300cc0579476ea81d7daf2fa40adb7d39e541a3b4b","first_seen":"2026-07-19T15:00:22.444376Z","last_seen":"2026-07-19T15:04:32.360379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/FILES/common.min.js?s=1399644532","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","date":"2026-07-19T14:59:52.546Z","timestamp":1784473192546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roanokethaimassage.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:97:CD:83:AB:73:98:CC:AD:C1:E5:7A:70:B2:48:3A:E7:86:21","sha256":"60:DB:0A:6B:3A:F6:2E:82:68:59:42:31:FB:64:08:E4:1B:91:A2:11:3C:EF:48:8A:F9:8C:E8:03:3E:47:32:44"}}},"request":{"raw":"GET /yx01xa/mail%20update/crypt/FILES/common.min.js?s=1399644532 HTTP/1.1\r\nHost: roanokethaimassage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://roanokethaimassage.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1999\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 19 Jul 2026 14:59:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5524,"size_decoded":2747,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (886)","md5":"4ee3a5ebd4b56066b34b81ab97dec5c4","sha1":"1918e124fe5532a137ded2a47d74263f1f34ae2e","sha256":"e448ec1f14ba5d303368ae9a0fa980896f2c247e7ecba6980839a9e5cfc9f213","sha512":"3cd1c3e6b5a062c05436331ef3b2680c048b246178c5f48d99e1b4937427d4687cbd806771e849306170bec25f7423e34621d6e476169fb60eefa9444acfdda9","ssdeep":"96:/EerKYIWVIFOWfKO36VvLb900kNvHm8UWZxiLOi8Q3tN3QKcE6ZD:/EROWfKa6VvLbfGf7ZgLpD1LqD","tlshash":"8eb12133ce1d881e16aac7657106300cc0579476ea81d7daf2fa40adb7d39e541a3b4b","first_seen":"2026-07-19T15:00:22.444376Z","last_seen":"2026-07-19T15:04:32.360379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/FILES/jstz.min.js?s=1399644532","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","date":"2026-07-19T14:59:53.138Z","timestamp":1784473193138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roanokethaimassage.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:97:CD:83:AB:73:98:CC:AD:C1:E5:7A:70:B2:48:3A:E7:86:21","sha256":"60:DB:0A:6B:3A:F6:2E:82:68:59:42:31:FB:64:08:E4:1B:91:A2:11:3C:EF:48:8A:F9:8C:E8:03:3E:47:32:44"}}},"request":{"raw":"GET /yx01xa/mail%20update/crypt/FILES/jstz.min.js?s=1399644532 HTTP/1.1\r\nHost: roanokethaimassage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://roanokethaimassage.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1999\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 19 Jul 2026 14:59:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5524,"size_decoded":2747,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (886)","md5":"4ee3a5ebd4b56066b34b81ab97dec5c4","sha1":"1918e124fe5532a137ded2a47d74263f1f34ae2e","sha256":"e448ec1f14ba5d303368ae9a0fa980896f2c247e7ecba6980839a9e5cfc9f213","sha512":"3cd1c3e6b5a062c05436331ef3b2680c048b246178c5f48d99e1b4937427d4687cbd806771e849306170bec25f7423e34621d6e476169fb60eefa9444acfdda9","ssdeep":"96:/EerKYIWVIFOWfKO36VvLb900kNvHm8UWZxiLOi8Q3tN3QKcE6ZD:/EROWfKa6VvLbfGf7ZgLpD1LqD","tlshash":"8eb12133ce1d881e16aac7657106300cc0579476ea81d7daf2fa40adb7d39e541a3b4b","first_seen":"2026-07-19T15:00:22.444376Z","last_seen":"2026-07-19T15:04:32.360379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roanokethaimassage.com/yx01xa/mail%20update/crypt/FILES/jquery-ui-1.9.2.custom.min.js?s=1399644532","fqdn":"roanokethaimassage.com","domain":"roanokethaimassage.com","tld":"com"},"ip":{"addr":"192.254.234.246","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php","date":"2026-07-19T14:59:53.430Z","timestamp":1784473193430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roanokethaimassage.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:97:CD:83:AB:73:98:CC:AD:C1:E5:7A:70:B2:48:3A:E7:86:21","sha256":"60:DB:0A:6B:3A:F6:2E:82:68:59:42:31:FB:64:08:E4:1B:91:A2:11:3C:EF:48:8A:F9:8C:E8:03:3E:47:32:44"}}},"request":{"raw":"GET /yx01xa/mail%20update/crypt/FILES/jquery-ui-1.9.2.custom.min.js?s=1399644532 HTTP/1.1\r\nHost: roanokethaimassage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roanokethaimassage.com/yx01xa/mail%20update/crypt/index.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://roanokethaimassage.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1999\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 19 Jul 2026 14:59:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5524,"size_decoded":2747,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (886)","md5":"4ee3a5ebd4b56066b34b81ab97dec5c4","sha1":"1918e124fe5532a137ded2a47d74263f1f34ae2e","sha256":"e448ec1f14ba5d303368ae9a0fa980896f2c247e7ecba6980839a9e5cfc9f213","sha512":"3cd1c3e6b5a062c05436331ef3b2680c048b246178c5f48d99e1b4937427d4687cbd806771e849306170bec25f7423e34621d6e476169fb60eefa9444acfdda9","ssdeep":"96:/EerKYIWVIFOWfKO36VvLb900kNvHm8UWZxiLOi8Q3tN3QKcE6ZD:/EROWfKa6VvLbfGf7ZgLpD1LqD","tlshash":"8eb12133ce1d881e16aac7657106300cc0579476ea81d7daf2fa40adb7d39e541a3b4b","first_seen":"2026-07-19T15:00:22.444376Z","last_seen":"2026-07-19T15:04:32.360379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"roanokethaimassage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"roanokethaimassage.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}