{"report_id":"2fc9923e-bba5-40c2-80d8-d07c827f72ad","version":6,"status":"done","tags":[],"date":"2026-01-30T20:41:07Z","url":{"schema":"http","addr":"afr.magmademo.it","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":0,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"afr.magmademo.it/","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"title":"Merola","dom":{"size":38981,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9370)","md5":"09c511500e0abd52a09e4c89fb6553c0","sha1":"783b240a027a6fc8e86e4da8d69d89e295a7b4b3","sha256":"c5d96dbc91b7bc57113b7952e8f0e6ed7f5bbca9430933101ef0be18f9870849","sha512":"0646e1041311fe95736cbef72cb3d6f439110a2af3784a5d52a5232395291367485aa277491311aaad63a2529a0ee0e9bd6543618ce5aaf8fb399813fcc76e7e","ssdeep":"768:Lsx3CRNZdypjc0yIXf5kLOO6T92pKACQmG1mWo0sCmf:LuSRFypI0yIXR29Xmxf","tlshash":"5203a532a09804b3662b57ec9190771cb4bad674cf839bb4b0fe916c1ed9df610a361d","dom_hash":"domhash3d1e74c16998b415c4d690b42e191bc1","first_seen":"2026-01-30T20:13:14.867067Z","last_seen":"2026-01-30T20:41:09.821209Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"afr.magmademo.it","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":0,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T20:41:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"afr.magmademo.it","ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"domain_registered":"2021-02-03","domain_rank":0,"first_seen":"2026-01-30T20:13:12.648185Z","last_seen":"2026-01-30T20:13:12.648185Z","alert_count":45,"request_count":15,"received_data":2040191,"sent_data":7383,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":2,"received_data":98182,"sent_data":1088,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"afr.magmademo.it/","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a29eee38377876a5fef7fde6f714211","sha1":"66e5281767a5e019dac163696dfe7753bba4fa20","sha256":"319580ef5f2f38f9bce87b07075e029a56de1b38a312721ce079be855246570d","sha512":"e169601e77e3897349a4cadf1710511a2d7e78011de7492d59affabe1f76f5df2bfb94be58ad1ef4671447d08260006536a29eba33f9bc3cda97bf1e681c65f3","ssdeep":"","tlshash":"a2b0127d230461390e9b105d761140c03c603014b007fc43686ddcc7c420ca45502804","size":104,"data":"","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-08-09T23:01:15.954304Z","times_seen":19743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0b86f63d8e513ec0ee000988df2d0bf","sha1":"3d6aa265bb5c508e4275409468ba770853def41c","sha256":"49e097bcd9c2275d04d9032a37c014de1bce78cf7899b8af15414b2fbff51c19","sha512":"f7e59a6559a0d3f3ba59c1423085a1f3a161dfd6c154e88d4fb8524dbb2ee60089cc9a8c6b959719523cdc54bd63cbb93e32bffb9b57c2bf7fdf69dda803d4a0","ssdeep":"","tlshash":"033143108649263280fb17ca91edd199b73a0cade349841420fdcd2e3f04da522d6ffc","size":1775,"data":"","first_seen":"2024-12-19T23:36:45.004196Z","last_seen":"2026-08-10T17:22:03.94502Z","times_seen":8777,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-content/uploads/fusion-scripts/31460cd98e460c826939b73dec67f169.min.js?ver=3.14.2","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e921229f95bdbeccac93aa63f5493087","sha1":"9a3704eb71804ed469dc75653e3220879125154b","sha256":"a4f5e05773bc23b998f1afcad78466835081a4ea770e1ddbdceeda8c7da97577","sha512":"b6d33ded91331e3a8b39b7472d59fd5c9667d5fcf57952870d1bb8739bda003f403fa93faf1a378a35bacac864bd20e334ea6fd2efdd81da0646da9a0b5b2875","ssdeep":"6144:0VJk/by3GycYAP4nETRDZ2xpCIZ/StcyNjWVr/Gktrt7:IJk/6NQTRNgUTt4/GktrF","tlshash":"39843a49b24030f541fb61aaf57f671972378769b5058108b16ec1ea2cb8e4aa173ffc","size":402837,"data":"","first_seen":"2026-01-30T20:13:14.874982Z","last_seen":"2026-01-30T20:41:09.827687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6781dcd66bcbbfda434123c41ccf6b89","sha1":"4d92cb8c9f692dd63e60c77854d345c50c0f1385","sha256":"047ae56297aa09e597705f4ef256244713ad6808932f3132c371b9a86d5d6248","sha512":"193b6f77eef46e8b535845b1af34c6756cdc77e6cc9ac8bb9987bf3482a3d44e289b12033b723c4ec8b1defd87e57bb38a7c0dd2935f4514889625e659c24113","ssdeep":"","tlshash":"25e0269d9f0c246bb13531d0543babaf307f127c7e80af2e7faaa1005dc8218c952a00","size":344,"data":"","first_seen":"2026-01-30T20:13:14.879359Z","last_seen":"2026-01-30T20:41:09.832637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-11T02:23:14.176036Z","times_seen":310848,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T02:48:33.129045Z","times_seen":1013929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T02:42:46.698922Z","times_seen":928873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-includes/js/wp-emoji-loader.min.js","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d3927655c11c1f19cb2ead505436ee8","sha1":"bd8070caae907f5fcd04ceb83cc0bc6aa8e95085","sha256":"f698773213470cb950bd2bf1aa6fdb1c2d20fc9455efedf838d58cd5a5c4ce77","sha512":"6811adbc72cc0b6de17584440020b93c5a6bec078625c2a2eb9e1eaf413a7dad528552eca1b0170be0749b173ab3c05131d74a85d59c861b5bf57c4182253905","ssdeep":"","tlshash":"9d61859ae77a38dbb2f900f2697a0d47eb614435d6c8d438c9bda3141cb58a3c274b46","size":3270,"data":"","first_seen":"2026-01-30T20:13:14.877204Z","last_seen":"2026-01-30T20:41:09.833372Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"afr.magmademo.it/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:46.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://afr.magmademo.it/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78212\r\nlast-modified: Thu, 18 Dec 2025 13:56:00 GMT\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78212,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78212, version 331.-31261","md5":"8c4f474a3aaa695346196b1f33fab616","sha1":"abc1ae262d760e104a5a5cb68614ac119fd0db18","sha256":"ef2369c82b6ec19bcf4fe76799d94edc43604e164c0f73978059536159845441","sha512":"8cebde83c69bf5cc28f64263efce6ac0179eb74e716461a2bd9f8a1aa24e9a1ec971f7d5487e9d4adcc4a970f241ca3d5f356a19abd57dda8dbcb5f1eb64ab09","ssdeep":"1536:MGgygaAeCFuk9I0yvQkAcaCfK+DBfT5UftBd5OCNY21r/CrDhy4DDh+xu:XglnpFz9KQkAhCfBxT5Uf7d59xiDEs","tlshash":"277312b4fa369bcfa19c7cd0418ff22bde4078296b9f550111cdfd606a12a747369d18","first_seen":"2023-04-06T21:42:42Z","last_seen":"2026-08-11T01:24:22.48612Z","times_seen":20420,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-content/themes/Avada/assets/images/logo@2x.png","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:46.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /wp-content/themes/Avada/assets/images/logo@2x.png HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://afr.magmademo.it/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 5450\r\nlast-modified: Thu, 18 Dec 2025 13:53:20 GMT\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5450,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 50, 8-bit/color RGBA, non-interlaced","md5":"a648afa19bfd2bc9e95d86106cca4ab7","sha1":"3333b6ef5f46f07ba5efaf593dfec314c45c9a06","sha256":"ef4431158fc515ce07b9a6fff7463ab457571d5f89bd27d1ee89cef18cc73585","sha512":"59886eed862d734db849ea457c7890001c4a88a77839bbe67ebe4bf99e1c2570849a9a3c9250570c8b8492c168a8238331ce3cb0e98bd86764495150e30bef5f","ssdeep":"96:Z5a4CkMSA4k0LZI/T1i9b9VQ7SSavHimLCFlvZ4tH9gpCB54spu54j5mEk7XSOc0:Z5K/w9OT1ip9VQ7SSavH1C7vCfp67XSS","tlshash":"abb1afe97f0cc60272ea1a55d443afacb84f55fb5c80d3848ee89b487e2c62acd3c150","first_seen":"2024-08-19T16:16:58.581043Z","last_seen":"2026-08-09T15:44:20.183566Z","times_seen":25,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-content/themes/Avada/assets/images/logo.png","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:46.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /wp-content/themes/Avada/assets/images/logo.png HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://afr.magmademo.it/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 2463\r\nlast-modified: Thu, 18 Dec 2025 13:53:20 GMT\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 115 x 25, 8-bit/color RGBA, non-interlaced","md5":"45fccd06791b76116415f78c9fe10d82","sha1":"2e52e67cb155332c9f145c6f82a98ab56f6046c0","sha256":"5a1a1fd9f6fea7267164404d7017803447877baebd21fee31373cbad1016ecf0","sha512":"49f5552a31c1e891204eddf8c49125c8579762e774648c75813297fd5cbdf09935860593281f5045b575ded24e393f00e94eaea95a31a99874850316c5119332","ssdeep":"","tlshash":"cf515beadb2c6069d1016b2a0e15c27748114589e8244c7e6cf8a04066f360cc3ee273","first_seen":"2024-08-19T16:16:58.576613Z","last_seen":"2026-08-09T15:44:20.196005Z","times_seen":24,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T20:40:45.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://afr.magmademo.it/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36805,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9370)","md5":"f7abeffe446ab83b55ff1a099c2ffd34","sha1":"0fbffd4b6528c85e4186c2ee27289deb33f98ad5","sha256":"2e085586c83598dc49c362d0cc8d88dc7ddb00a71e5951684a07697583084581","sha512":"c9ef468b32992e11b2cf6439148359895cae078308058b629bc150ce43b5de0fe79592ee3485017a0669db3dab20d4d76ee2026b47914f3ece1c623aba6c23c7","ssdeep":"768:uneZdypjyi6yEXf5kvOO6T9LKpKACQmG1mWo0sCmD:uneyph6yEXxu9XmxD","tlshash":"cff28432a09904b3666f5bec8150771cb4bada74cf8396b5b4fe912c0ed9df640a321d","first_seen":"2026-01-30T20:13:14.874246Z","last_seen":"2026-01-30T20:41:09.823694Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":66,"dns":1,"connect":16,"send":0,"wait":17,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-content/uploads/fusion-styles/076b2cac562e85141a697fac90c8d6f4.min.css?ver=3.14.2","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:45.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /wp-content/uploads/fusion-styles/076b2cac562e85141a697fac90c8d6f4.min.css?ver=3.14.2 HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://afr.magmademo.it/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 15:58:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696a6022-134ed1\"\r\nexpires: Fri, 06 Feb 2026 20:40:46 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1265361,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45877)","md5":"cf40856d5bd91e1d6e446d0245d44b16","sha1":"af5eb614a151e7274007325c05de03f08dc2c6d9","sha256":"4192617f4f03c57355a19b30d7d4e93f6597d9924b1623afdaae6543cf65aeba","sha512":"f164ee70512cfec76e9b7c845a4c2fbd2c706d885368b39f2b9a1d36bb4f3991529c1787ce4177753a3eb404cfb0015045c370e0311b2995ca6497e7de627aa5","ssdeep":"6144:FnncLJnJdk+Px0IFTBwa3XjKkxtH9F83ZRilEP+oHf8Sudms0X3Ekln85RL9AsnS:du3dlOIFT7jHYilEP+peTCFA","tlshash":"9725c9e1d04410e47373d32de788ba6c5137abd0f6424fe8f4dd958a49c6ba9ca913e8","first_seen":"2026-01-30T20:13:14.870992Z","last_seen":"2026-01-30T20:41:09.82461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:45.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://afr.magmademo.it/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:46 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T02:48:33.129045Z","times_seen":1013929,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:46.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://afr.magmademo.it/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 76736\r\nlast-modified: Thu, 18 Dec 2025 13:56:00 GMT\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76736,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31261","md5":"9ab1ccbf4c2b583b1d848018561da0a9","sha1":"68ac09c5daef91dd2220ef3d063cd757989e0982","sha256":"83238a9c118b388bee1eede2f1c04b6441ac0c4a543f502457e3d2309a9d3e99","sha512":"651f12f2626590c292f0a17a0a225077afa07d8c771b03da4640368e9f1421458b5e45d55c7d2c2cbef516166d7ccf79f2c14e0da0f2358617f387cab8c9daf4","ssdeep":"1536:jw0FRxBtmBtqlYkq1mP8mG6fFeniXXIAOUziLl89P8/scx4VGD/2V:jw0/xBtMt+YkqC8igiXXcuiLl8G/ss/E","tlshash":"807312bfc88a63493d7ebd3dc2043ea8433c945ca5d5b050e75994b8f4b82ac6adc16d","first_seen":"2023-04-11T01:34:40Z","last_seen":"2026-08-11T01:24:22.483493Z","times_seen":10743,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/favicon.ico","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:46.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://afr.magmademo.it/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://afr.magmademo.it/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nlocation: https://afr.magmademo.it/wp-includes/images/w-logo-blue-white-bg.png\r\nx-proxy-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T02:55:35.911989Z","times_seen":17829037,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:47.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://afr.magmademo.it/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 4119\r\nlast-modified: Tue, 16 Nov 2021 00:04:01 GMT\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-08-11T01:25:32.073924Z","times_seen":73209,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-content/uploads/fusion-scripts/31460cd98e460c826939b73dec67f169.min.js?ver=3.14.2","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:46.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /wp-content/uploads/fusion-scripts/31460cd98e460c826939b73dec67f169.min.js?ver=3.14.2 HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://afr.magmademo.it/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 20:52:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696aa503-62595\"\r\nexpires: Fri, 06 Feb 2026 20:40:46 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":402837,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10627)","md5":"e921229f95bdbeccac93aa63f5493087","sha1":"9a3704eb71804ed469dc75653e3220879125154b","sha256":"a4f5e05773bc23b998f1afcad78466835081a4ea770e1ddbdceeda8c7da97577","sha512":"b6d33ded91331e3a8b39b7472d59fd5c9667d5fcf57952870d1bb8739bda003f403fa93faf1a378a35bacac864bd20e334ea6fd2efdd81da0646da9a0b5b2875","ssdeep":"6144:0VJk/by3GycYAP4nETRDZ2xpCIZ/StcyNjWVr/Gktrt7:IJk/6NQTRNgUTt4/GktrF","tlshash":"39843a49b24030f541fb61aaf57f671972378769b5058108b16ec1ea2cb8e4aa173ffc","first_seen":"2026-01-30T20:13:14.874982Z","last_seen":"2026-01-30T20:41:09.827687Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:46.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://afr.magmademo.it\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://afr.magmademo.it/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 10:59:18 GMT\r\nexpires: Sun, 24 Jan 2027 10:59:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 553288\r\nlast-modified: Tue, 09 Sep 2025 18:33:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-11T02:52:00.536131Z","times_seen":26248,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":64,"dns":1,"connect":7,"send":0,"wait":11,"receive":11,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:46.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://afr.magmademo.it\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://afr.magmademo.it/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 10:59:18 GMT\r\nexpires: Sun, 24 Jan 2027 10:59:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 553288\r\nlast-modified: Tue, 09 Sep 2025 18:33:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-11T02:52:00.536131Z","times_seen":26248,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":71,"dns":1,"connect":7,"send":0,"wait":8,"receive":7,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-content/themes/Avada-Child-Theme/style.css?ver=6.9","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:45.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /wp-content/themes/Avada-Child-Theme/style.css?ver=6.9 HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://afr.magmademo.it/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:46 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 16 Jan 2026 15:33:54 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"94275e7e8aad6729ddc3bde8206680b0","sha1":"15826eedfb106163a4acb4734c2d96160c21f7ac","sha256":"2dc50d424a96415697f26f2c39b67c70b10e8a95fd108b4d981aafe222392cf2","sha512":"86c3eeafb8d2f29f67dfe4a8873fac05a98d2cbc1a69d783a01cd077a9182ff3ceb676e5ee4e864f638c9ec6e04dee29a19c8b513d67778779f2264eb4879e86","ssdeep":"","tlshash":"bac01290511767a1e1b986059473e10587b6f71491f121a5d09d0589917929962fe238","first_seen":"2023-04-05T11:24:14Z","last_seen":"2026-08-10T22:52:54.594032Z","times_seen":3758,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:46.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://afr.magmademo.it/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:46 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T02:42:46.698922Z","times_seen":928873,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/awb-icons.woff","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:46.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/awb-icons.woff HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://afr.magmademo.it/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:46 GMT\r\ncontent-type: font/woff\r\ncontent-length: 22768\r\nlast-modified: Thu, 18 Dec 2025 13:56:00 GMT\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22768,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 22768, version 1.0","md5":"db200c1b2504805397fc6a346d45106e","sha1":"37a43f65c3a650e4a39e737023db740820d8af18","sha256":"7fb75a83e922c90a34648b5b6b9aeb3bc43c8eb6a12f8a96ad5c1df861778979","sha512":"739d11df29dee9eefdbbad3e46131afbba42b55e7c50eeb944633837805f8225b000046007e59be32e5cce2dab38e69d02b683c796995933b047ca700ddd93df","ssdeep":"384:36eXXRqNjKGs4T+DBC1itld0uBcZR8P0TRNprqnYLcpNszj24rqLcEF505:39qRKGsO+F2itlS4cZuP0TRTrHcEzje2","tlshash":"08a23a17cbabcf4ee817a67c8d7763220df9e511833ae3e1a5865c4890195f04d2cf9a","first_seen":"2025-11-13T01:40:32.213773Z","last_seen":"2026-08-10T08:48:49.426815Z","times_seen":2945,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:46.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://afr.magmademo.it/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13264\r\nlast-modified: Thu, 18 Dec 2025 13:56:00 GMT\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13264, version 331.-31261","md5":"8eb1b3e8681657092171b6aa809493c2","sha1":"aa6cc2d47049bc05505d6ec1cd5237558b04d6e3","sha256":"65ae05cb1187b6eacddcc464141af208d9c172aeed20c74c3bf7663b530c5c0d","sha512":"18b89cd08824903d7b11db5121089d195f6c79f420787b74488a673472993c7f7adffdc6979f6940c1cdff2c05726cbdc54d39128654aed5d12327090523e7c0","ssdeep":"384:o9YaYYXwStvE7PHv9wHOuUd1DEo/u1+V0:GfYYXztvEDgOuUrEomN","tlshash":"4752cf6d143fd8cec0b154a54417f4ea36e616aa2b34f343696f3a734a706425a50c3e","first_seen":"2023-04-13T22:20:52Z","last_seen":"2026-08-11T01:24:22.475747Z","times_seen":10869,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afr.magmademo.it/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"afr.magmademo.it","domain":"magmademo.it","tld":"it"},"ip":{"addr":"213.165.250.117","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://afr.magmademo.it/","date":"2026-01-30T20:40:46.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afr.magmademo.it","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 16:11:39 GMT","end":"Tue, 14 Apr 2026 16:11:38 GMT"},"fingerprint":{"sha1":"BD:88:AB:E7:C3:13:73:AB:54:83:6B:C7:1B:18:C1:2F:11:05:3F:FC","sha256":"06:D1:E4:0B:4C:85:5B:7E:29:78:C7:1F:F2:3C:CE:C6:CF:C9:89:BF:36:4D:60:EF:98:35:04:0E:02:6E:D0:CE"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: afr.magmademo.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://afr.magmademo.it/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.4\r\ndate: Fri, 30 Jan 2026 20:40:46 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 16 Jan 2026 15:33:10 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-11T02:23:14.176036Z","times_seen":310848,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"afr.magmademo.it","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"afr.magmademo.it","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}