{"report_id":"2fecda9b-5ca8-4353-a4ab-46e1aafe75e5","version":0,"status":"done","tags":[],"date":"2026-10-11T00:36:51Z","url":{"schema":"http","addr":"cdm.life/","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"172.67.207.254","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cdm.life/","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"title":"想啟動資產配置，卻發現「體力換錢」的速度，永遠追不上累積本金的目標？ | CDM.LIFE","dom":{"size":189061,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57454)","md5":"ac8662e4226254b85150d1450764a01d","sha1":"08b524de7c86b518e46f54ec49c9abf3310cd49c","sha256":"6a0becc19807a8ef187042e4e734d0f8162b6baee472327b48358ddb46296f71","sha512":"cc1d3a22c2c2213ab139f94b35fd0a7ccb7c162ae5ae95b53784d091ac652b5f93711055bc3cb6732c0bf5fd152096b0b67e2412826dc36141d76469fda3abdc","ssdeep":"1536:CTmP/+SaFLHa2aEaAavaAaTaCGyp01M3hZyQFe2s/AitCzy1OHBM3ZZyQs/qitsv:CTbZ8BsCWrmkt9mRrCQQDIHAlIkuag","tlshash":"8e040a70a7a0157a323743bdf95bf60829699603db4e66eaf0fec15886c5fd314e120e","dom_hash":"domhashc0d209f9ad59f2dd44e9fec0304b1ce2","first_seen":"2026-10-11T00:37:07.927542Z","last_seen":"2026-10-11T00:37:07.927542Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cdm.life/","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"172.67.207.254","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T00:36:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdm.life","ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-12-10","domain_rank":0,"first_seen":"2026-10-11T00:36:59.907496Z","last_seen":"2026-10-11T00:36:59.907496Z","alert_count":40,"request_count":20,"received_data":834787,"sent_data":9873,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WPMU DEV Smush:4.3.3","description":"WPMU DEV Smush is a WordPress plugin that allows you to optimise images without losing quality.","website":"https://wpmudev.com/project/wp-smush-pro","common_platform_enumeration":"","icon":"WPMU DEV.png","categories":["WordPress plugins"]},{"name":"Site Kit:1.189.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Spectra:2.20.4","description":"Spectra is a WordPress plugin that provides a collection of new and enhanced blocks for the WordPress Block editor.","website":"https://wpspectra.com","common_platform_enumeration":"","icon":"Spectra.svg","categories":["WordPress plugins"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"craftmkt.sgp1.digitaloceanspaces.com","ip":{"addr":"103.253.144.208","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":460340,"sent_data":2385,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":3,"received_data":76563,"sent_data":1671,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":7563,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-04T22:47:33.985443Z","alert_count":0,"request_count":1,"received_data":541206,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdm.life/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T03:43:27.341778Z","times_seen":1003624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/uagb-loop-builder-js-extra","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb182e795d3fd37ab61d42966dda60b9","sha1":"8cc061ff510a79152b539863fc8a96a262391533","sha256":"c7b063436220f285098a8a0b934678b1b4b358bec3649712ed75f6c6d8b196c7","sha512":"53436175d32406043df96eba12b4bef529e2040058d757659ea6811592faae75814372b1ee47e58e5e9725c9361502d40d5906b6fe7e51af0d34005799758ed6","ssdeep":"","tlshash":"91018065c4880fd399900ff519265f72d5f73835e0814c0a9e1af1c4015414a4554109","size":713,"data":"","first_seen":"2026-10-11T00:37:07.965837Z","last_seen":"2026-10-11T00:37:07.965837Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/faq.min.js?ver=2.20.4","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8440185826d6eb907dd29131821eadc2","sha1":"9d8386225a777c48327b1bdb04fd48c0bef23c97","sha256":"128346e15870a3513fb1ae9665dd3f7cb2bea87b7a912f01e97ce3689b103d10","sha512":"4368d72e850ed5f465693e2ef0410e8736d5efd58b492a7f92af7e7f5c42d475852c314618bbb85e6d6005e5ceb03010d833704bbe5a02dcb1675d6db1aeb732","ssdeep":"96:LDyacrU6tdDG4woPMaqv4UryZi36lk5/DBX7:/yf/tdDG4Py4UryZS6lkrL","tlshash":"7d81046027003ff724d7628b844bb8c5b16068c99f65a8b4772c982f295dece21f17f5","size":4110,"data":"","first_seen":"2023-03-14T02:20:22Z","last_seen":"2026-10-11T00:37:07.951815Z","times_seen":2171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/uploads/uag-plugin/assets/1000/uag-js-1267.js?ver=1790693366","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f4e3f320e09813a1995bcf54660767f","sha1":"e219c0682d36bc6fb4401a74867b1b10cf6b2abc","sha256":"f41b0455a58ec6e2190e28177b2ee803fdcb1fd57b863d5a7cd9c8d2df1846fd","sha512":"1733fe0917c999dbbffaaf08aed5bc0739c46b08aad89c156471086110641b16067aeb87df615ae29411eb4335453de1c3fee30ff36be33ac76b95dee11ab2d8","ssdeep":"","tlshash":"34d02ba677160e388572f236453ff7691c3f0112dc0018806111c8c1b9458cadcf24c7","size":260,"data":"","first_seen":"2026-10-11T00:37:07.930101Z","last_seen":"2026-10-11T00:37:07.930101Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/uploads/astra-addon/astra-addon-6abbcff62a5172-95431426.js?ver=4.13.10","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19c36fa7956aa1b624167cb1f3bed2f9","sha1":"64281c1e4488369f9c63daa2c24b6b2d8fa863c6","sha256":"e678fa9d832b4adbec6113c671df2c249b6ad49787f695a45d28d4cf3f261b66","sha512":"ddb8a0007955e3914df10a942731850a11806aa6e1c7300f81be9d211a6e54e187b1ee4638a43dbe5e753d59f9cfeb9d5687b59b6ceac1ea55b9cc7a5796bcf8","ssdeep":"768:MNtI2IhuuOwyCwXIFORPV89LLE3XxGEx5WiTE3tcg/qhxOGaEfJOJMBqLzgygGHj:qLm66OlcEqLjT2w1","tlshash":"2c13ea58631435f900bf07e6e42da94c71a2ca3fa3ae00517599897f1898fa162f1f7e","size":43325,"data":"","first_seen":"2026-09-26T13:41:09.381587Z","last_seen":"2026-10-11T00:37:07.963488Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-events-provider-content-events-6b04077d00f0d606ba42.js","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a9f588bba3eeb301de7690c346d445d","sha1":"9435d5380dd1118a8f54b443ab6bc5294b955eb7","sha256":"52aa12ee4e25bd5c555b974491b1a9d2e05a2b07d2d4267d0b884034d2f193b3","sha512":"c27db494a0cac029e2507a612a3df4cf2c5fdb938a5f961504ecdb062f4a42405526bf4954e3a93957628a96a8846250e7ea17c68ba1034d30e0360c7ec1b950","ssdeep":"384:upMCtDqyREAGO2p923VF2laQzgwCadYIdrysiBWu3Jdm62:upMCVLGRtaQzgwCadldez00N2","tlshash":"9b52e8d575d1f8b256e1a2dad03f6203f13c761bb42de410f26dddc4a91aec341b2a2a","size":14016,"data":"","first_seen":"2026-10-06T06:32:08.902226Z","last_seen":"2026-10-11T03:37:54.007544Z","times_seen":512,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-5NTC245D","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae92a334317bf60b755f80d3c9203efd","sha1":"ae58836f335eb52ad9463a5bfaf7a6bfd7a0a96e","sha256":"4cad5dd14f3b152f24f0fb9cb18fe064ffd0ed645df4d41927cd8c47bb760132","sha512":"41c8b99a59d8b924c5c389baefbfbf80d8aeb08fde4f2839cb0b32926b1a86947fd74c9c3fbabc65c7f6cf10f31b51183afec6530ae9361374a577ec3004af18","ssdeep":"6144:kpsfCyqMnhImaVlQV+cfIb/EfD3ceiXmcw2rSGer/4p:UEKmWJmc/Wu","tlshash":"fcb408ceb3c6742293a6f578903f01cb657a29a2b45cc89af189dce02d3465a5173f7c","size":540602,"data":"","first_seen":"2026-10-11T00:37:07.955498Z","last_seen":"2026-10-11T00:37:07.955498Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T03:43:56.396868Z","times_seen":80458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T03:43:27.328462Z","times_seen":1099317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e8915a57f61043013a25cefd79a9b60","sha1":"41210e127026644071a0881637cb2b0cb28c4e28","sha256":"2869db08ec3ce2dc64aee4f4da7c4eb0267baa3c0dcfb19c84ce8b93064d9a55","sha512":"0efb2d3bf9c5e9168fbdb17038498b95dbe9b6dd11b9534303f321f818dac1b1f1aaff6f26a91807d01d11a7343d209222f303a270eced5b2ff2383d4d5f5010","ssdeep":"","tlshash":"1801287324c11afbc9faa802575667953a5333dad674641149dc151434bfd47e1d4cc8","size":728,"data":"","first_seen":"2026-10-11T00:37:07.967078Z","last_seen":"2026-10-11T00:37:07.967078Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5ed44a0a16901d7d4b07f832254f56e","sha1":"24ff505e1901984c931b6e57641f2750fcf80984","sha256":"8c429e219865e1adfcf7e3f9921c27f5099d6680d45cd4a59d715c30c88080a1","sha512":"4656dd2188980e9f2b941a0f5d90dd99f5a9ff7f6ef011e5774a4729c985fad51eba5d442cb155f93c4598a338b59cb1d678922fa7fdea354d82a67c11ea2d80","ssdeep":"","tlshash":"4bb001b6b8118d798a8e620db17cc3e83cb80480fb433901e0bca48a2070eca9c01e88","size":95,"data":"","first_seen":"2023-03-07T01:15:13Z","last_seen":"2026-10-11T03:46:00.040273Z","times_seen":13892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"05a2c2cc06fe4b6e9d1c34604b006944","sha1":"ba6b5823a1773ec866bdccfc831edbc388e0def0","sha256":"589b3fe643d3676110f5aa3a3db9231d56acf32203f081302aa45425fd1666aa","sha512":"4ead945368978ed9c2b89c65f967d2e1676fbc078c23891ce8bbaf82c0c0b5a9d67ee9babc3e1d1ee48761cd32fdfcabe55cce0a063c704f1edce15f0f1565d2","ssdeep":"","tlshash":"9be0ab1a4b002e2282f2a6b9e86f7a507e275ff384cd0100c958c6815f22d879923ed3","size":430,"data":"","first_seen":"2026-08-11T15:52:54.561366Z","last_seen":"2026-10-11T03:41:01.270397Z","times_seen":2327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06f019a6ff09db6b297570940eec1d5d","sha1":"872efe186950ce534aad341e7030fe24f7c672dc","sha256":"53f829ae556bf7011727483015d83a98bcdb4b5796eecb728827c1282c971536","sha512":"0cc41e9797501e654a2b51a1adba4d3593347ada90e0dbdeea3ee89345415ab192007ae9886855447d472d814b8945fcb680ae7fb8942d17af1682a33236d633","ssdeep":"","tlshash":"5be07dfafd5b457101e7a1237bce739e293275a3e92a4c402889ce806c38dd31126dd1","size":325,"data":"","first_seen":"2023-03-07T01:19:13Z","last_seen":"2026-10-11T03:41:01.287382Z","times_seen":27320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ae2dd3715ee9aadf04a5224d7680e43","sha1":"94985736b322308aef3162b1efdcaa0d049aae4f","sha256":"1a32f948f91ccde921f5268a953084329dc6040c2a021864a448e1855589a92b","sha512":"d6845561dfa7208653fd01f96240ee179bb9ee514f30033e2b13add02caf676a73b7e4cfe997d6e4437235b9e2e53e5f6e685accbebc975f7fd548b768f84f7e","ssdeep":"","tlshash":"8c01d046028b2e8712dfddd5b02c577ab0fc0d60f6909155ceee8d6d0392f16910950f","size":742,"data":"","first_seen":"2026-10-11T00:37:07.977513Z","last_seen":"2026-10-11T00:37:07.977513Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30b239f9b5d8ef8c8ed641bc9eea3049","sha1":"853d326a0d3b05a953ac2c1bbcb383bad0748855","sha256":"b739c0767d89a5678ac6e53d379b7a8aa192545e08404ec9891cc0ce6a9edb2b","sha512":"eed4b91d553eb98bd2048d59b1787cf8d2a08d99d3c6398bcc80d93c539922d39fcdf79d0ace8340c8bd45b119986e2e99f3f6b651289695a1a52c7b73bdca88","ssdeep":"","tlshash":"b5c0806544880fd359900fc515265f71d5f73835e0414c0a9e16f1c4011414a4554109","size":159,"data":"","first_seen":"2026-10-11T00:37:07.980568Z","last_seen":"2026-10-11T00:37:07.980568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a20828522ac54b5ab65a7fe5f2c79a2f","sha1":"fc5d3ac4fb6260c42185ef9ef59a3cccd9e0b339","sha256":"f85e446e38d6e260960a15dc498306622e5e09414aefe6b767d20df9292f7814","sha512":"4b96fb43691b05d98c0396679368e1e184395336288966510e6fe9a05f928cf4c13b081493b1ceee40505e1c85d26e4a20983f8b7b103ec45ebce16deb0e2c51","ssdeep":"","tlshash":"6931460c836669a5069393dbdb149c2e75fb2d58d6f68034fddc8e5a83de68121500a8","size":1732,"data":"","first_seen":"2026-10-11T00:37:07.982346Z","last_seen":"2026-10-11T00:37:07.982346Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"38b226e319227d353595368f84aa2f2b","sha1":"8a2b09436ce7243852e51e19ee256ef7a99b8b21","sha256":"4f43fa6a56b7c954efaa928e097cef73b3186b6963eb6e97314317fbc505abbe","sha512":"9f9b8a6c1f7934c35907537a063141e0515ce12b944e85dcfdaeb15ddfbe2c7ad9d3d13cd3d423734c7341db8567d2c9b3debc17af81ea0220579b28fb45770d","ssdeep":"","tlshash":"d4e0d81b28441afbd392b255a3573a671a0471cdf8343814c5fe495c64cfd8265e48c6","size":361,"data":"","first_seen":"2026-10-11T00:37:07.987442Z","last_seen":"2026-10-11T00:37:07.987442Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4de3dcfeff7859312b4c0f9f17d7ba43","sha1":"4048bcd61d02e28aa627fd135123df9a894d9fe6","sha256":"9ec8ad758c36dce2176c043e50870e53949aa2e1bf1ed7219ddb9e2f9bc1b1f1","sha512":"18b305e5209bb00ce92b7eb8ccf6ee5aca9e05551fcc8311e4df7e4665499e288166d020600f0dc68debd3dfcca28bce5a66ad01feeb51551b404a277a679e46","ssdeep":"","tlshash":"cac080fd186257dd50c666365051360195d9d733d9111d3dd5cac184f4370145643947","size":170,"data":"","first_seen":"2026-08-04T01:10:14.501102Z","last_seen":"2026-10-11T00:46:11.448448Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/astra-theme-js-js-extra","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3d84fa16eda529a87f04bea402cec52","sha1":"d94fe03a71d3c3a3d4c472cbe9d6b3550f6d5fb1","sha256":"8eeb31df15ca804e80a97467f31af89839234709dec2017fd37f549280f08a13","sha512":"a7c3756df0d8826bc567dd24e434feb056ccfb0c8dafe0c7a6694fe198b138529d19fd1c928918ab227a4b0dc53b64c3b9db398df22323014b993c3741fc0ba5","ssdeep":"","tlshash":"de21bd46c28b2e8712dfddb5b02c577ab0fc0d60f6909155caee8d6d0292e16910950e","size":1291,"data":"","first_seen":"2026-10-11T00:37:07.990957Z","last_seen":"2026-10-11T00:37:07.990957Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/spectra-block-positioning.min.js?ver=2.20.4","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb5d7efb1bc838480f4ca0d67c124249","sha1":"0292349ba263236243a33fb7fdded5527e17bf6a","sha256":"bac6add1bf7ec50484cc9c7336db1c6333b0f911675eb2a95c6af5d28b15adab","sha512":"4c7a0a52d7917f8387fefa7e266a9fd195fa28d077bcfb767bd985d197a32a09068cc58101d275d921d954b3f2edd390bba382ef8662ff27a6fdc3fc007da1db","ssdeep":"48:czXyS1kQcF8P32bUIP9I9s0nv2RGc+Auuk7XulA4MzU27XuTIo657XufNPh4gnzS:q/q8EI9sgv4COIUMiAqNPfEPonGik","tlshash":"0a91b08003021e3bd2a3279571dab9443330456dd7e6d47183fa9a2b6398cc768b3af9","size":4450,"data":"","first_seen":"2024-10-13T03:11:06.787751Z","last_seen":"2026-10-11T00:48:11.948635Z","times_seen":7614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/astra-addon/assets/js/minified/purify.min.js?ver=4.13.10","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ed73ecaac5c0f5848a829df98029db1","sha1":"6d28a0e2f4c43dbb7a28bc82d6bf64676e87c64e","sha256":"d7cd99844c09e2b808307b5c19562f03674e68a8095c9cd588bf9271c87f81dc","sha512":"928928a309ffcfbabf84d9db33b38a41c08ba5a5fada56fb5106a807290170c94eaa8def80491d51ba42e3f87a86817e41f3e3691086edf606da559b3f978492","ssdeep":"768:nCgbCyZ6j8hMW6GXUfiIUticbhbY2SIThPhfzbZweoOSqfPcUq9pNhuvkHwQrxTk:i8V9/hbY2f5PcU09h9T1dhMe6Ya","tlshash":"00d24ba9bc5175726fdb51d9507b160ea17c242f300d8090e2cdecb61cbaa9960b7f2f","size":28398,"data":"","first_seen":"2026-06-30T10:59:32.172908Z","last_seen":"2026-10-11T03:18:14.195661Z","times_seen":1880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/googlesitekit-events-provider-content-events-js-before","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89be3723247697c09d7a8cd0e4b07e4a","sha1":"2e32a4b089352cc6641524af11c4ba56a09f9867","sha256":"2161c2c23dfaeaa2fade4ed65247a3ec49046b2d4604a1e5d2e08fcd7b13c417","sha512":"e945fd046c15f8b7c7886bda5374e5886a8898e3e39a8cf4b7173646dd7496faa54465b9e6f5ca2dc5f34102bdabf0c039f44ae8cd88a23cc1a14f72dff74771","ssdeep":"","tlshash":"0911682be8440afbc392b2b1a3173a271a0071cdf8303800c4fe491c64cfc8268e48c2","size":930,"data":"","first_seen":"2026-10-11T00:37:07.992336Z","last_seen":"2026-10-11T00:37:07.992336Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/google_gtagjs-js-after","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92547aa4ad545f9d3bbd4133f750e4ce","sha1":"e61a9ad2e6491a53cdff64e9ea8a66c5e21c6dcf","sha256":"2caa255aef40882b37147e0eaa769066b13eea4178a4008ebe6810b16d64460d","sha512":"0acb3fea1c7c52b4d24f12bcadb9056b1f4febcbf38e7bb294f4349b451d200c2ccd4c4494b4033d7e1eeb26bfb8a77e503daeab5071e258ef0b7e6e2ccc57ed","ssdeep":"","tlshash":"b6016833e0c10afbc9faa832575627953a5333dad674640089cc150434bfd43e0c4cc8","size":846,"data":"","first_seen":"2026-10-11T00:37:07.995917Z","last_seen":"2026-10-11T00:37:07.995917Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/spectra-pro/assets/js/loop-builder.js?ver=1.3.2","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25d6933ec0a07ce668377feca0b21106","sha1":"f1650fe228c252048cbf006d741ce6a6c054fcfe","sha256":"fa30a807f4e03de4a13ad6f0b68cc5804f5973cbd78e2791f0de486dd984ede4","sha512":"25ad1b7ef1c14fc0f19795b4e45fb5afce891ec8bbcdc5ff42aed9c49e669700f38f889eb21d3004fdcd73ab8c4ab89098c073b38642021ced9d7a523d8be958","ssdeep":"768:K1HvTvfiR6CXz3HBZbMH8QUHNTYVNotJ/JFh1Uf4dTUnzP88FW88BVRXPt:8v7Ez3u9ANkV8dTUcn","tlshash":"b2c2e96e35f603f0053b223d978b72a47531609b2101ddacbdcdda4e2f9896449e37ae","size":27005,"data":"","first_seen":"2025-06-18T22:44:30.851947Z","last_seen":"2026-10-11T00:37:07.948478Z","times_seen":1902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/astra-addon-js-js-extra","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"089319ec0dec596b9360424c553275af","sha1":"d606cb6f45803013b2fb5e764fdffb3a62fc3216","sha256":"1f2735245fd1dbdb09852254051252d7700802238d5ac7879786531b4f4a3493","sha512":"885f7633ed04d68acd39230396aa2ef34409be92c9f9b0fb0fea0f8f72562c9236d9ded7351ec83a6c1045db7b2305aa2820a419715c9ca00ef3a81103e408d4","ssdeep":"","tlshash":"c241460cc36669a5069397fbdf189c2e75fb2d58d6f68034fddc8e5a83de68121500a8","size":2295,"data":"","first_seen":"2026-10-11T00:37:07.998501Z","last_seen":"2026-10-11T00:37:07.998501Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/smush-lazy-load-js-before","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f699c0ebcbc05241d678023b34f018e2","sha1":"33cd7a258c67b0587af9b7c11b2ec1a42481a23e","sha256":"3543ba8369b330ee6d83c88aa9f97ae0fc8c39e1a97f8145a8f0a84defa9ab12","sha512":"ebaf0f49083a67bacde1bbfd612e0b8c6a6a8adb2d009c9d148fb35b38b1e670ec863c48a76bc1799578b92778a45a9ea6a3e53d72d9b5ab3e4c3fade351cecd","ssdeep":"","tlshash":"8001c0fdc86253dd90c2623640413200d0d8d733d9001c3cc1cec080f4330004203903","size":745,"data":"","first_seen":"2026-10-02T19:07:29.203282Z","last_seen":"2026-10-11T00:37:07.999928Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=4.3.3","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"afb13f235ce536829fbec0f7c5d2b647","sha1":"bf1e3387705b18cf19c534875d4a59710ffba5eb","sha256":"9346e0a712449de1824b081ae8b810c3efc9b9ff9972a283838bdc19323e580d","sha512":"ae6facf9a41542132bd198b6f7eec4d51963a8bfa502d2c137eeb8c2c9a82714a0ab4ea60309db609d1c63824be158e78dca631c97ae0ae3a562cb2bfbb76b87","ssdeep":"384:ntLfFcaiUMkgp4BHBrpFu9joqxaHCr8SbUW6CXUnzw5RlbsxUXAkkWNpyvI3e+Zk:nNFV3DgpcHBrps9joqx6CASbUW6CEnzV","tlshash":"3ea2d9ae7297f07a99977075442f210bb23636261899c494f436d4d0ae3dd8e6223f7c","size":23302,"data":"","first_seen":"2026-09-17T02:13:44.216855Z","last_seen":"2026-10-11T00:46:11.225006Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.11","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdddd0006601bc36bf1b83eacfd10e29","sha1":"e28975a8917c91ea76a8413e24b01018e7d7b3d6","sha256":"64039bc0ea1375a941b82283d361c2834f16468a7c2b493db5e7ad88cd3cc33b","sha512":"fe89e165e64cdad38a03640eab476ad568459974ff28448ed44bff1dc977bc614659689b95c48810c12fd7c6236fa39b00a2999ed1264b4c7cd2a8864e909d26","ssdeep":"768:MtPx6joDcFDTHjIroxo6o5oXC1eZRcjC1LlJtmxTwQYJC7YuU92tfSrgt8zQmIFN:4Px6ZUGC1eZRcjulLmxTwbaZSnWhdcPI","tlshash":"a9c272a667002a3604fe17e7f5deabc47671149ffa0944115839cc1e29a8fc361f1afa","size":26824,"data":"","first_seen":"2026-09-08T16:16:35.55054Z","last_seen":"2026-10-11T00:37:07.958805Z","times_seen":555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/uagb-button-child.min.js?ver=2.20.4","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56cdc01d88461d9332895e3487ca954a","sha1":"9e1f77b7387f8f489b4cc9793be930b93b237f48","sha256":"8a141c1f5150e1fd5b07d095c5b41be07116255fc2e5431ef66205bb7dc4a74f","sha512":"6aae208ba50317a997a3a6aa5fbf2f3cd3840614bfd38b8226cc7b3b687b64ba0658bf062943d45c825938b7259f15bd09f6ffab10faa64e8a7496a1f04ebcb7","ssdeep":"","tlshash":"57e0e5f0630d4ab618e9d9a63669fbc4275681de60512805bc2aacf9298c680209226b","size":421,"data":"","first_seen":"2024-05-07T04:32:10Z","last_seen":"2026-10-11T00:48:11.605689Z","times_seen":5657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-includes/js/wp-emoji-loader.min.js","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03f921ee4d522af77e1e5e39478a0fa7","sha1":"2cadf5889321b023ba72fed45e73109c7fb875ab","sha256":"6a484520ee75dc40495edb308411aad06acb5ba8592a63ec2cbd74fa737b718f","sha512":"d027636c210cc5eab75cd39b109c17c4c35b3dc482b1a68ade40f979aeafe4b356997cbb340badac42e5a324988bbbf4e4bf03611151c56455645bc33cc7bf61","ssdeep":"","tlshash":"b0718559eb7938df33fa01f2653a4d47eba14436e684d03cc9ae631424b1893c375a5a","size":3629,"data":"","first_seen":"2026-10-11T00:37:08.001366Z","last_seen":"2026-10-11T00:37:08.001366Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://cdm.life/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/astra-addon/addons/nav-menu/assets/css/minified/magamenu-frontend.min.css?ver=4.13.10","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.755Z","timestamp":1791678564755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/plugins/astra-addon/addons/nav-menu/assets/css/minified/magamenu-frontend.min.css?ver=4.13.10 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"0-6abbcfd3-481c67;;;\"\r\nlast-modified: Tue, 29 Sep 2026 14:48:51 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fh86qksQAFOYmCcKbiJSMBuhpD%2FejiG0JMA4o3EK3t4mSfFonseNdRg0kfTlg3i7v%2FfP7P%2BkG8cKBi8IXdzBpBIBFp9oFl8Jfrr4mUqMnXW41b1o%2FrXMFLbbzg%3D%3D\"}]}\r\ncf-ray: a489c015bd874c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":859,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T03:43:34.994419Z","times_seen":19016333,"resource_available":true,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/uploads/uag-plugin/assets/1000/uag-js-1267.js?ver=1790693366","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.766Z","timestamp":1791678564766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/uploads/uag-plugin/assets/1000/uag-js-1267.js?ver=1790693366 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"104-69d3b862-47832e;gz\"\r\nlast-modified: Mon, 06 Apr 2026 13:42:58 GMT\r\ncontent-type: text/javascript\r\naccept-ranges: bytes\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fqVLReBzwHfQCcTzMilNXiZxGujQzGuVX%2BkjAuwQb%2B4uL3Wk5zWJU%2Bcphe0QrMbmR0uxwpCSLujfVJSrecpUM8kq%2B3oX%2FDI3e0JcwWMFF7F8EZPotAWe4ZzD6Q%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a489c015cd964c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":260,"size_decoded":1055,"mime_type":"text/javascript","magic":"ASCII text","md5":"6f4e3f320e09813a1995bcf54660767f","sha1":"e219c0682d36bc6fb4401a74867b1b10cf6b2abc","sha256":"f41b0455a58ec6e2190e28177b2ee803fdcb1fd57b863d5a7cd9c8d2df1846fd","sha512":"1733fe0917c999dbbffaaf08aed5bc0739c46b08aad89c156471086110641b16067aeb87df615ae29411eb4335453de1c3fee30ff36be33ac76b95dee11ab2d8","ssdeep":"","tlshash":"34d02ba677160e388572f236453ff7691c3f0112dc0018806111c8c1b9458cadcf24c7","first_seen":"2026-10-11T00:37:07.930101Z","last_seen":"2026-10-11T00:37:07.930101Z","times_seen":1,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-events-provider-content-events-6b04077d00f0d606ba42.js","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.770Z","timestamp":1791678564770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-events-provider-content-events-6b04077d00f0d606ba42.js HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"36c0-6ac47a3d-484e7e;br\"\r\nlast-modified: Tue, 06 Oct 2026 04:34:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TvwWQAD%2FIUnEoqWm2leoCra6dDHCuSD%2BPav3Omt8Xanbeoq07NvLPWSXm9sDu0Q0MlcVoJDNKANMtwWuSwORROIpkKpriuQyLPXL%2BO51q1CfUlhO70%2B6O2mNqg%3D%3D\"}]}\r\ncf-ray: a489c015cd9b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14016,"size_decoded":5034,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14014), with no line terminators","md5":"9a9f588bba3eeb301de7690c346d445d","sha1":"9435d5380dd1118a8f54b443ab6bc5294b955eb7","sha256":"52aa12ee4e25bd5c555b974491b1a9d2e05a2b07d2d4267d0b884034d2f193b3","sha512":"c27db494a0cac029e2507a612a3df4cf2c5fdb938a5f961504ecdb062f4a42405526bf4954e3a93957628a96a8846250e7ea17c68ba1034d30e0360c7ec1b950","ssdeep":"384:upMCtDqyREAGO2p923VF2laQzgwCadYIdrysiBWu3Jdm62:upMCVLGRtaQzgwCadldez00N2","tlshash":"9b52e8d575d1f8b256e1a2dad03f6203f13c761bb42de410f26dddc4a91aec341b2a2a","first_seen":"2026-10-06T06:32:08.902226Z","last_seen":"2026-10-11T03:37:54.007544Z","times_seen":512,"resource_available":true,"data":null}},"time_used":837,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:26.378Z","timestamp":1791678566378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1.3 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nCookie: _ga_QK64WFXVVQ=GS2.1.s1791678566$o1$g0$t1791678566$j60$l0$h0; _ga=GA1.1.94598375.1791678566\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_QK64WFXVVQ","value":"GS2.1.s1791678566$o1$g0$t1791678566$j60$l0$h0"},{"name":"_ga","value":"GA1.1.94598375.1791678566"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:27 GMT\r\netag: \"58e0-6a50763d-4988f3;br\"\r\nlast-modified: Fri, 10 Jul 2026 04:34:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:27 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VgqjX%2FoYD3pP7ZUOag8nZMqVdU6lfpKe1SWiDqCPY0cYapHEuXSmV0qNFKMC1gWPCtnEH7UQLN%2BccztngeJ2e6dPKfB5ioStAtdgQH%2FXaPqTUJF4lGAEU7Pchw%3D%3D\"}]}\r\ncf-ray: a489c01fdf9f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22752,"size_decoded":5851,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T03:43:56.396868Z","times_seen":80458,"resource_available":true,"data":null}},"time_used":837,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"craftmkt.sgp1.digitaloceanspaces.com/cdmlife/2026/01/%E5%AE%B6%E5%BA%AD%E6%8C%81%E7%BA%8C%E6%94%B6%E5%85%A5%E7%B3%BB%E7%B5%B12%EF%BD%9C%E9%A6%96%E9%A0%81.png","fqdn":"craftmkt.sgp1.digitaloceanspaces.com","domain":"craftmkt.sgp1.digitaloceanspaces.com","tld":"sgp1.digitaloceanspaces.com"},"ip":{"addr":"103.253.144.208","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:26.126Z","timestamp":1791678566126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sgp1.digitaloceanspaces.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:E0:03:7A:92:97:3B:FE:1C:3B:B1:B7:DB:1D:92:19:FB:51:8D:47","sha256":"6F:74:59:08:2C:CB:2B:7D:15:EA:04:04:07:E2:F7:51:61:37:68:28:97:9E:E9:4F:81:85:14:61:AF:4F:B4:11"}}},"request":{"raw":"GET /cdmlife/2026/01/%E5%AE%B6%E5%BA%AD%E6%8C%81%E7%BA%8C%E6%94%B6%E5%85%A5%E7%B3%BB%E7%B5%B12%EF%BD%9C%E9%A6%96%E9%A0%81.png HTTP/1.1\r\nHost: craftmkt.sgp1.digitaloceanspaces.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 427078\r\naccept-ranges: bytes\r\nlast-modified: Sat, 10 Jan 2026 06:10:29 GMT\r\nx-rgw-object-type: Normal\r\netag: \"6d2311ae0674570f75cc4a1ede9d5cc9\"\r\nx-amz-request-id: tx00000c5996a3e9fba0cbd-006acad866-7d7917d3-sgp1b\r\ncontent-type: image/png\r\ndate: Sun, 11 Oct 2026 00:29:26 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":427078,"size_decoded":427555,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"6d2311ae0674570f75cc4a1ede9d5cc9","sha1":"57e682c2cc648128972f21c7b1fdd2b12b9d1200","sha256":"25f3fbf9f4d56a1e87bd54efa249bc4727ae69e39efa0d14ccc9f56cbff38600","sha512":"6a1c3443a0464b5f4cbf043648090e00126d795a093a3001b78c44e21e607e0d93152012db32bfbe2c7ad17bd582602c9f9c23a2de4c22a370190ab80156bd5f","ssdeep":"6144:draTjvlUiTZlXXsU2LHHUdUUFlC02gqetegmL/IpwXZG6D9F9tKc7hWSkhJsUUaY:4+qZhcRCUOHVty/oYZtxtvnkhqUUWs","tlshash":"4a9423a94b62d79d39bc161125366e94cee4db7ef13d491c823f01d8e992b590330f53","first_seen":"2026-10-11T00:37:07.933567Z","last_seen":"2026-10-11T00:37:07.933567Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2431,"timings":{"blocked":-1,"dns":6,"connect":252,"send":0,"wait":539,"receive":1127,"ssl":507},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/spectra-pro/dist/style-blocks.css?ver=1.3.2","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.742Z","timestamp":1791678564742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/plugins/spectra-pro/dist/style-blocks.css?ver=1.3.2 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"bd6c-6a872eed-49a9e6;br\"\r\nlast-modified: Thu, 20 Aug 2026 16:44:29 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwYWzGmN20VvOl3q8JY4%2BJLva8NGiY63Ns6OQrHP8zgw4BhUEzKH7%2Fpi3cEHdHXXY6OonEo0DeIrvUxIsWbZ%2Fu%2BH6WmSxVPZebzo3jNJFjMxrMc3LPLXxt1Brg%3D%3D\"}]}\r\ncf-ray: a489c0159d784c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5392\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":48492,"size_decoded":6300,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (11249)","md5":"d7e2473bf08ecd6a6f8b7f8e4f81a80a","sha1":"a5eefc061de8dacb448f94e33e36f2032c159a98","sha256":"778569c7d942321861805fb48104ba471f1a77f9abfca9e375fa4757775bcf20","sha512":"cfc93b1530e902dcc26747b038d3044612b1ab7826a972ebb8a39f685dc2e20ab7f4516b98b9547399e459fb05388b138771c92d2c750b78282a227a50479fa6","ssdeep":"192:KZDQV5C+NT/tw0eepLyHXIaPqBfmeAxoxMWxMsxMvxFx7axxxExDxVxlx4xuxFxw:ODENTVRsHbF/AzNqI+aB/oxUclu","tlshash":"2f239329f878099aa47e53149da934062606d018990e8ed9e742fdf89bcf085cfd77cf","first_seen":"2025-04-21T09:31:37.954089Z","last_seen":"2026-10-11T00:37:07.935411Z","times_seen":1680,"resource_available":true,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":807,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/uploads/uag-plugin/assets/1000/uag-css-1267.css?ver=1790693366","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.745Z","timestamp":1791678564745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/uploads/uag-plugin/assets/1000/uag-css-1267.css?ver=1790693366 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"2cece-6a6b031a-4782fa;br\"\r\nlast-modified: Thu, 30 Jul 2026 07:54:02 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9eDG3TNrvz6%2FNclDy7H%2FgI2GYhX1nGZRKXYLY0tukBFS05F2yrEmh6Vs05VRhJOTIdGhRiM0wsseWy1zi2821sLQLFyMrtA6EW1zFaouQ4iFfB87sX3TYRhh8A%3D%3D\"}]}\r\ncf-ray: a489c015ad7b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10899\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":184014,"size_decoded":11805,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d29428d22c4ab713c42f757a05d89238","sha1":"64a6c39109a122d7ab697cc5be5eae093776e1a2","sha256":"e796c65e5e21e341e3612768ee5a083f49009969c2fec11f6eb979e2ffb07ec5","sha512":"9f24dc3f9bef92007d97d75cfd7cdefb3a1df04dd98ebf7070f7dc547ec183a5488501849b0bf9e108dd87a68dfc521913be8f46f1c0e457292e53aacadd7fd1","ssdeep":"1536:1e7p/BkovE5NX6M7KaeX5p9fhSLaay+p/5UOJvmN/jS8Por0fAV:1edBIKHpEmY","tlshash":"f504009416380bed72316baead0bb5516a42e603ef5368dbf482d003f9df6e118d075b","first_seen":"2026-10-11T00:37:07.936477Z","last_seen":"2026-10-11T00:37:07.936477Z","times_seen":1,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.749Z","timestamp":1791678564749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"15601-675e4e01-4988a2;br\"\r\nlast-modified: Sun, 15 Dec 2024 03:33:21 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dmuL3RPWaWvg6yyx7tZfCqr5LpV8ZJkC%2B9BPLxsnZM9rt9I02CfHuO9Ju%2B%2Bv49IZjofw1A7iIEyHvPKeXR%2BV2iLfYRF6F8cCKPfQW7ZLyUxQnUutQOwKbQqKOw%3D%3D\"}]}\r\ncf-ray: a489c015ad844c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29597\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":30514,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T03:43:27.328462Z","times_seen":1099317,"resource_available":true,"data":null}},"time_used":1230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=4.3.3","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.772Z","timestamp":1791678564772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=4.3.3 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"5b06-6aabac84-48bacc;br\"\r\nlast-modified: Thu, 17 Sep 2026 09:01:56 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BsDl97TV%2BITcKPJUBOLRe5Xl7X6SLoz%2BTwJnXrH0VhGNQCasumoqXuTMyardGzBkPO%2FZeHFPi8vqIFOGqY7klMb27Vc90KO%2F0ptk2BdkpJV1Ttljd87UKZPnDg%3D%3D\"}]}\r\ncf-ray: a489c015cd9c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7860\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23302,"size_decoded":8777,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23302), with no line terminators","md5":"afb13f235ce536829fbec0f7c5d2b647","sha1":"bf1e3387705b18cf19c534875d4a59710ffba5eb","sha256":"9346e0a712449de1824b081ae8b810c3efc9b9ff9972a283838bdc19323e580d","sha512":"ae6facf9a41542132bd198b6f7eec4d51963a8bfa502d2c137eeb8c2c9a82714a0ab4ea60309db609d1c63824be158e78dca631c97ae0ae3a562cb2bfbb76b87","ssdeep":"384:ntLfFcaiUMkgp4BHBrpFu9joqxaHCr8SbUW6CXUnzw5RlbsxUXAkkWNpyvI3e+Zk:nNFV3DgpcHBrps9joqx6CASbUW6CEnzV","tlshash":"3ea2d9ae7297f07a99977075442f210bb23636261899c494f436d4d0ae3dd8e6223f7c","first_seen":"2026-09-17T02:13:44.216855Z","last_seen":"2026-10-11T00:46:11.225006Z","times_seen":389,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:26.101Z","timestamp":1791678566101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cdm.life\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:57:53 GMT\r\nexpires: Tue, 05 Oct 2027 15:57:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 462693\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-11T03:37:41.864237Z","times_seen":49382,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":26,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"craftmkt.sgp1.digitaloceanspaces.com/cdmlife/2026/01/cropped-LOGO26-1-200x59.png","fqdn":"craftmkt.sgp1.digitaloceanspaces.com","domain":"craftmkt.sgp1.digitaloceanspaces.com","tld":"sgp1.digitaloceanspaces.com"},"ip":{"addr":"103.253.144.208","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:26.125Z","timestamp":1791678566125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sgp1.digitaloceanspaces.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:E0:03:7A:92:97:3B:FE:1C:3B:B1:B7:DB:1D:92:19:FB:51:8D:47","sha256":"6F:74:59:08:2C:CB:2B:7D:15:EA:04:04:07:E2:F7:51:61:37:68:28:97:9E:E9:4F:81:85:14:61:AF:4F:B4:11"}}},"request":{"raw":"GET /cdmlife/2026/01/cropped-LOGO26-1-200x59.png HTTP/1.1\r\nHost: craftmkt.sgp1.digitaloceanspaces.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 3526\r\naccept-ranges: bytes\r\nlast-modified: Sat, 10 Jan 2026 06:10:28 GMT\r\nx-rgw-object-type: Normal\r\netag: \"b1db54354dc81708e07d2299ced578c5\"\r\nx-amz-request-id: tx000008e6de8faea002731-006acad866-7d49916f-sgp1b\r\ncontent-type: image/png\r\ndate: Sun, 11 Oct 2026 00:29:26 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3526,"size_decoded":4001,"mime_type":"image/png","magic":"PNG image data, 200 x 59, 8-bit colormap, non-interlaced","md5":"b1db54354dc81708e07d2299ced578c5","sha1":"0cee842efc859fca3ab54f9d3a30343c1c82bd96","sha256":"7365c29735a03f917391de3bb59efdbd87cc99615019535e51ab2e27c4820341","sha512":"a42fa89e11ec01896bf3411a995959227c99fd8c2201ba6cee272eed48c666031c562293f8a26f61fca91af914d3a4c4924e14e074a145c87be55cb064894892","ssdeep":"","tlshash":"33716d13322151fae32594f0e7a91618900a2ddbbdef67d73487984ea36263cc861638","first_seen":"2026-10-11T00:37:07.94332Z","last_seen":"2026-10-11T00:37:07.94332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1026,"timings":{"blocked":-1,"dns":7,"connect":251,"send":0,"wait":259,"receive":0,"ssl":508},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/spectra-pro/assets/js/loop-builder.js?ver=1.3.2","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.759Z","timestamp":1791678564759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/plugins/spectra-pro/assets/js/loop-builder.js?ver=1.3.2 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"697d-6a872eed-49a9c5;br\"\r\nlast-modified: Thu, 20 Aug 2026 16:44:29 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BSK8qOaZV%2F0%2Baz5K06EbxUgnsjBAh1wmMqwiKIHVGyse0PZaZZkxYN5llKsn89P4Zk3GDEFYRZVsvofbm1HgpDajC5v1nZBsKVRau1cHSywZeHJO%2BK9MuLbFuQ%3D%3D\"}]}\r\ncf-ray: a489c015bd8b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4473\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27005,"size_decoded":5386,"mime_type":"text/javascript","magic":"ASCII text","md5":"25d6933ec0a07ce668377feca0b21106","sha1":"f1650fe228c252048cbf006d741ce6a6c054fcfe","sha256":"fa30a807f4e03de4a13ad6f0b68cc5804f5973cbd78e2791f0de486dd984ede4","sha512":"25ad1b7ef1c14fc0f19795b4e45fb5afce891ec8bbcdc5ff42aed9c49e669700f38f889eb21d3004fdcd73ab8c4ab89098c073b38642021ced9d7a523d8be958","ssdeep":"768:K1HvTvfiR6CXz3HBZbMH8QUHNTYVNotJ/JFh1Uf4dTUnzP88FW88BVRXPt:8v7Ez3u9ANkV8dTUcn","tlshash":"b2c2e96e35f603f0053b223d978b72a47531609b2101ddacbdcdda4e2f9896449e37ae","first_seen":"2025-06-18T22:44:30.851947Z","last_seen":"2026-10-11T00:37:07.948478Z","times_seen":1902,"resource_available":true,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/spectra-block-positioning.min.js?ver=2.20.4","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.761Z","timestamp":1791678564761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/spectra-block-positioning.min.js?ver=2.20.4 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"1162-6abbcfdc-4940f7;br\"\r\nlast-modified: Tue, 29 Sep 2026 14:49:00 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5HOHU8eUp2HZSfCzRZWlUBZNSVbQ3jdy4goYXvLsV3ROHh056BHF1QAy%2F4VIzaKS2CydyF6cGvJOd4CmcAHnj0UgjTOLbUMPs3WLdsv41u8qNngpzCNg1OFjuA%3D%3D\"}]}\r\ncf-ray: a489c015bd934c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1006\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4450,"size_decoded":1915,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4450), with no line terminators","md5":"eb5d7efb1bc838480f4ca0d67c124249","sha1":"0292349ba263236243a33fb7fdded5527e17bf6a","sha256":"bac6add1bf7ec50484cc9c7336db1c6333b0f911675eb2a95c6af5d28b15adab","sha512":"4c7a0a52d7917f8387fefa7e266a9fd195fa28d077bcfb767bd985d197a32a09068cc58101d275d921d954b3f2edd390bba382ef8662ff27a6fdc3fc007da1db","ssdeep":"48:czXyS1kQcF8P32bUIP9I9s0nv2RGc+Auuk7XulA4MzU27XuTIo657XufNPh4gnzS:q/q8EI9sgv4COIUMiAqNPfEPonGik","tlshash":"0a91b08003021e3bd2a3279571dab9443330456dd7e6d47183fa9a2b6398cc768b3af9","first_seen":"2024-10-13T03:11:06.787751Z","last_seen":"2026-10-11T00:48:11.948635Z","times_seen":7614,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"craftmkt.sgp1.digitaloceanspaces.com/cdmlife/2026/01/LOGO26-3.png","fqdn":"craftmkt.sgp1.digitaloceanspaces.com","domain":"craftmkt.sgp1.digitaloceanspaces.com","tld":"sgp1.digitaloceanspaces.com"},"ip":{"addr":"103.253.144.208","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:26.678Z","timestamp":1791678566678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sgp1.digitaloceanspaces.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:E0:03:7A:92:97:3B:FE:1C:3B:B1:B7:DB:1D:92:19:FB:51:8D:47","sha256":"6F:74:59:08:2C:CB:2B:7D:15:EA:04:04:07:E2:F7:51:61:37:68:28:97:9E:E9:4F:81:85:14:61:AF:4F:B4:11"}}},"request":{"raw":"GET /cdmlife/2026/01/LOGO26-3.png HTTP/1.1\r\nHost: craftmkt.sgp1.digitaloceanspaces.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 13916\r\naccept-ranges: bytes\r\nlast-modified: Sat, 10 Jan 2026 06:10:28 GMT\r\nx-rgw-object-type: Normal\r\netag: \"30f61a548bcb47841f8b6f6485dd0dd6\"\r\nx-amz-request-id: tx0000031a5848c8cacec55-006acad866-7de8ccfc-sgp1b\r\ncontent-type: image/png\r\ndate: Sun, 11 Oct 2026 00:29:26 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13916,"size_decoded":14392,"mime_type":"image/png","magic":"PNG image data, 213 x 213, 8-bit colormap, non-interlaced","md5":"30f61a548bcb47841f8b6f6485dd0dd6","sha1":"1511f445ee9a1e6f4b3b8adeded612a85946daf7","sha256":"9a7af76fbe1eeffc2277b6c9534f8d191335cb207eb8cc325fcc7d061dc3b93c","sha512":"5cedd10beb3b94eaa4c25e8d35bfdd4b2b7963d725d143d80045f51ff951c03ff406491aad124845e80b62770810874d984f794ba5a0e8b63d5163f9968ae30c","ssdeep":"384:sbHiVWGDRA4smb2CPcfL/RVRIL3kE7wm6oEHubI5g9WS2:IV04q2FzI3hHNEHuGzS2","tlshash":"5752e126fa9ef5c171c2b4441574225ea6a5df3e14fb8125c3d82a7770f02295d6cba0","first_seen":"2026-10-11T00:37:07.950108Z","last_seen":"2026-10-11T00:37:07.950108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/faq.min.js?ver=2.20.4","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.764Z","timestamp":1791678564764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/faq.min.js?ver=2.20.4 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"100e-6abbcfdc-4940e3;br\"\r\nlast-modified: Tue, 29 Sep 2026 14:49:00 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pJqvj%2Fqd1bpkHCKSBzwRpyzcL1gz%2B12tPPbJNU%2FETntu%2FG56nuedmcDZqnqGeXXnM7kpE3997KxUMak6EhD5ySsOfbMSlihFK4j5vxgL4bvep9fBlqXyPIcV1Q%3D%3D\"}]}\r\ncf-ray: a489c015cd954c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 963\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4110,"size_decoded":1877,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4110), with no line terminators","md5":"8440185826d6eb907dd29131821eadc2","sha1":"9d8386225a777c48327b1bdb04fd48c0bef23c97","sha256":"128346e15870a3513fb1ae9665dd3f7cb2bea87b7a912f01e97ce3689b103d10","sha512":"4368d72e850ed5f465693e2ef0410e8736d5efd58b492a7f92af7e7f5c42d475852c314618bbb85e6d6005e5ceb03010d833704bbe5a02dcb1675d6db1aeb732","ssdeep":"96:LDyacrU6tdDG4woPMaqv4UryZi36lk5/DBX7:/yf/tdDG4Py4UryZS6lkrL","tlshash":"7d81046027003ff724d7628b844bb8c5b16068c99f65a8b4772c982f295dece21f17f5","first_seen":"2023-03-14T02:20:22Z","last_seen":"2026-10-11T00:37:07.951815Z","times_seen":2171,"resource_available":true,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T00:29:23.015Z","timestamp":1791678563015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://cdm.life/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://cdm.life/wp-json/wp/v2/pages/1267\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://cdm.life/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-litespeed-cache: hit\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 11 Oct 2026 00:29:24 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JiaDfSHISOuWLQZiMlgLrT9QYUL2HJFA7yoF0GYLOwdypLcIzqSez16UNB1OEeR%2B3Rx6PqJW%2B9dh8f1DuW%2FAOULuzYuqO1pygzSyDWujwbd8GZnkDwTk%2F1pNRg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a489c00b5b0a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WPMU DEV Smush:4.3.3","description":"WPMU DEV Smush is a WordPress plugin that allows you to optimise images without losing quality.","website":"https://wpmudev.com/project/wp-smush-pro","common_platform_enumeration":"","icon":"WPMU DEV.png","categories":["WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Site Kit:1.189.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Spectra:2.20.4","description":"Spectra is a WordPress plugin that provides a collection of new and enhanced blocks for the WordPress Block editor.","website":"https://wpspectra.com","common_platform_enumeration":"","icon":"Spectra.svg","categories":["WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":189004,"size_decoded":39975,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57347)","md5":"5729c756cf9f420f7b7f01b08a2c6144","sha1":"01f6b268156070d105aecdeba0aa99b82dcb08c2","sha256":"e5cb007c0cafb033227232d39b3ef8f125a35d525eae473e7f08a015f96021cb","sha512":"b0e3328b579e037abb1915d0a826b3a0ace83b2997ad2ba0ad54ec84fe9742cd9a12a629038acb4493d612e8f16310c4796b8a986ecf17e6bcf597a1132d5eb7","ssdeep":"1536:YONP/+SaFLHa2aEaAavaAaTaCCypZ1M3hZyQFe2s/AitCzy1OHBM3ZZyQs/qitst:YOoNVej7r53t9mRrCQQDIHAl5kuaD","tlshash":"e2040a60a7a0157a323743bdf95bf60829699603db4e66eaf0fec15886c5fd314f120e","first_seen":"2026-10-11T00:37:07.953168Z","last_seen":"2026-10-11T00:37:07.953168Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1312,"timings":{"blocked":-1,"dns":66,"connect":15,"send":0,"wait":1195,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Manrope:400%2C600|Inter:600\u0026display=swap\u0026ver=4.13.11","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.740Z","timestamp":1791678564740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Manrope:400%2C600|Inter:600\u0026display=swap\u0026ver=4.13.11 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 11 Oct 2026 00:29:24 GMT\r\ndate: Sun, 11 Oct 2026 00:29:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6879,"size_decoded":1454,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6d2fca566b5a4d7cbea9ac08993490c6","sha1":"08f795e5877931b15d782fcecac9045a477e8678","sha256":"fd1f398579192d2a0c404143bc58cc5b89254daa880dad63f64207401afa9add","sha512":"fffaf23ae0e37722e47c8971befbfe1ff420a58b2e817b045bce1d1800c4b2787569bb088026d82b5180808ebf982f0b52f0097bcb5d33d99beb8f14c22c2f1b","ssdeep":"192:b0rD54o3inpBwJDEV3WW8B4JlOV3MM8vs:431ZwFEH","tlshash":"dfe19b91002be400eb471dd677cf7e39ad8e62456481c5ba5bfe1cc8acdbd222364b5e","first_seen":"2026-10-11T00:37:07.954314Z","last_seen":"2026-10-11T00:37:07.954314Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-5NTC245D","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.753Z","timestamp":1791678564753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=GT-5NTC245D HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:24 GMT\r\nexpires: Sun, 11 Oct 2026 00:29:24 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 180230\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":540602,"size_decoded":180834,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6696)","md5":"ae92a334317bf60b755f80d3c9203efd","sha1":"ae58836f335eb52ad9463a5bfaf7a6bfd7a0a96e","sha256":"4cad5dd14f3b152f24f0fb9cb18fe064ffd0ed645df4d41927cd8c47bb760132","sha512":"41c8b99a59d8b924c5c389baefbfbf80d8aeb08fde4f2839cb0b32926b1a86947fd74c9c3fbabc65c7f6cf10f31b51183afec6530ae9361374a577ec3004af18","ssdeep":"6144:kpsfCyqMnhImaVlQV+cfIb/EfD3ceiXmcw2rSGer/4p:UEKmWJmc/Wu","tlshash":"fcb408ceb3c6742293a6f578903f01cb657a29a2b45cc89af189dce02d3465a5173f7c","first_seen":"2026-10-11T00:37:07.955498Z","last_seen":"2026-10-11T00:37:07.955498Z","times_seen":1,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":45,"receive":69,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:26.103Z","timestamp":1791678566103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cdm.life\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24452\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:53:49 GMT\r\nexpires: Tue, 05 Oct 2027 15:53:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 462937\r\nlast-modified: Tue, 09 Sep 2025 18:36:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24452,"size_decoded":25265,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24452, version 1.0","md5":"2ede57db1a3a5f41f40467e7a43a1dd4","sha1":"e0d61f6dc511d64a072b2f4dc94e155ecf1bb6f6","sha256":"f9a06e79cd3a2a20951c0f0e28f66dd0e6d3fda73911d640a2125c8fcb78f21a","sha512":"a30d204efb2a66231f29804b8c1e467d61a741b0252eccb40aea60206bd4d5cdb0a32a76cb01d1ba8ba0c73469d10fc55df1d8e54ea3b55b6b75b17e94afc80b","ssdeep":"384:WuaNAiwkOHiuWl18daDX7+rEvHG297z5lzWMTSbXhVR7ebvio772036BhuJJRiVF:zaKfkOHiJEdWX+svP5m7R7eTio7JKWHC","tlshash":"79b2e03132ea530e5b14c43c9537287e5eca2fe78aa93e5e9fd5d004b2104d6836fe06","first_seen":"2025-05-30T14:20:15.679609Z","last_seen":"2026-10-11T02:57:39.297206Z","times_seen":8512,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":18,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:26.105Z","timestamp":1791678566105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cdm.life\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:57:53 GMT\r\nexpires: Tue, 05 Oct 2027 15:57:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 462693\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-11T03:37:41.864237Z","times_seen":49382,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":33,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"craftmkt.sgp1.digitaloceanspaces.com/cdmlife/2026/01/LOGO26-3.png","fqdn":"craftmkt.sgp1.digitaloceanspaces.com","domain":"craftmkt.sgp1.digitaloceanspaces.com","tld":"sgp1.digitaloceanspaces.com"},"ip":{"addr":"103.253.144.208","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:26.680Z","timestamp":1791678566680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sgp1.digitaloceanspaces.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:E0:03:7A:92:97:3B:FE:1C:3B:B1:B7:DB:1D:92:19:FB:51:8D:47","sha256":"6F:74:59:08:2C:CB:2B:7D:15:EA:04:04:07:E2:F7:51:61:37:68:28:97:9E:E9:4F:81:85:14:61:AF:4F:B4:11"}}},"request":{"raw":"GET /cdmlife/2026/01/LOGO26-3.png HTTP/1.1\r\nHost: craftmkt.sgp1.digitaloceanspaces.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 13916\r\naccept-ranges: bytes\r\nlast-modified: Sat, 10 Jan 2026 06:10:28 GMT\r\nx-rgw-object-type: Normal\r\netag: \"30f61a548bcb47841f8b6f6485dd0dd6\"\r\nx-amz-request-id: tx00000c67281e4f595173d-006acad866-7d79404b-sgp1b\r\ncontent-type: image/png\r\ndate: Sun, 11 Oct 2026 00:29:26 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13916,"size_decoded":14392,"mime_type":"image/png","magic":"PNG image data, 213 x 213, 8-bit colormap, non-interlaced","md5":"30f61a548bcb47841f8b6f6485dd0dd6","sha1":"1511f445ee9a1e6f4b3b8adeded612a85946daf7","sha256":"9a7af76fbe1eeffc2277b6c9534f8d191335cb207eb8cc325fcc7d061dc3b93c","sha512":"5cedd10beb3b94eaa4c25e8d35bfdd4b2b7963d725d143d80045f51ff951c03ff406491aad124845e80b62770810874d984f794ba5a0e8b63d5163f9968ae30c","ssdeep":"384:sbHiVWGDRA4smb2CPcfL/RVRIL3kE7wm6oEHubI5g9WS2:IV04q2FzI3hHNEHuGzS2","tlshash":"5752e126fa9ef5c171c2b4441574225ea6a5df3e14fb8125c3d82a7770f02295d6cba0","first_seen":"2026-10-11T00:37:07.950108Z","last_seen":"2026-10-11T00:37:07.950108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1878,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/astra-addon/assets/js/minified/purify.min.js?ver=4.13.10","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.769Z","timestamp":1791678564769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/plugins/astra-addon/assets/js/minified/purify.min.js?ver=4.13.10 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"6eee-6abbcfd3-492115;br\"\r\nlast-modified: Tue, 29 Sep 2026 14:48:51 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P4pXeR7ii2GJTVSN9mkgcxhHYpJVbgxB3xVXw0CsyfqsAGsZmHJxaBbaWWALtjXoj1vLuPeLWWn2p2TTvqChy7F7UGv9xeiRhwo4ANmEPpEulqHqb6UhQFaJDg%3D%3D\"}]}\r\ncf-ray: a489c015cd984c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10149\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28398,"size_decoded":11057,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28208)","md5":"2ed73ecaac5c0f5848a829df98029db1","sha1":"6d28a0e2f4c43dbb7a28bc82d6bf64676e87c64e","sha256":"d7cd99844c09e2b808307b5c19562f03674e68a8095c9cd588bf9271c87f81dc","sha512":"928928a309ffcfbabf84d9db33b38a41c08ba5a5fada56fb5106a807290170c94eaa8def80491d51ba42e3f87a86817e41f3e3691086edf606da559b3f978492","ssdeep":"768:nCgbCyZ6j8hMW6GXUfiIUticbhbY2SIThPhfzbZweoOSqfPcUq9pNhuvkHwQrxTk:i8V9/hbY2f5PcU09h9T1dhMe6Ya","tlshash":"00d24ba9bc5175726fdb51d9507b160ea17c242f300d8090e2cdecb61cbaa9960b7f2f","first_seen":"2026-06-30T10:59:32.172908Z","last_seen":"2026-10-11T03:18:14.195661Z","times_seen":1880,"resource_available":true,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.13.11","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.737Z","timestamp":1791678564737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.13.11 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:24 GMT\r\netag: \"afff-6aa0959c-4828ea;br\"\r\nlast-modified: Tue, 08 Sep 2026 23:09:16 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F0VBJvxmE6grVz31UouiRGibYyRubVWRpnDYT7RsxmExIMvMn2U5d31JvUS3jDUysEeJjITAqnYpB1%2FyrohVtO6Nwkv5ELhOBHJ%2FLagnfUfpt4Cax%2FyGVdvp%2Fg%3D%3D\"}]}\r\ncf-ray: a489c0159d764c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8298\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":45055,"size_decoded":9208,"mime_type":"text/css","magic":"ASCII text, with very long lines (42981)","md5":"fb37de099bb1a82f23e5e473727243ce","sha1":"fc895c987926b894b6e700c04358dc34d667cc51","sha256":"6c6cf780ef34ede2f29da833f262fb459c1f7dd745de1f5addbfca5292408e62","sha512":"a04dca4495a046fc637b3d47b413ebd27a9d4c24f00144f769feaedfdfc82da128b097c2d14c187fb9ca82278ab48dc80c978a5b8a6cec7fad5fe6a0e6e28621","ssdeep":"768:NPQO5k1rhbYollnk+FHkFYCzxdvN3bR2/WLmiyCFS7QHQtBU5WOT1enhm2a7ZAR3:xIUY+LHQtBU59TwDuaP","tlshash":"d913e86047d035395233473efad6ba082b694313d74f66e2f8ab8768c9c57c71a72a4c","first_seen":"2026-09-08T16:16:35.577302Z","last_seen":"2026-10-11T00:37:07.957835Z","times_seen":256,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.11","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.757Z","timestamp":1791678564757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.11 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"68c8-6aa0959c-482916;br\"\r\nlast-modified: Tue, 08 Sep 2026 23:09:16 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=siX7j%2FydV7JhsMa%2BET65CHY3ZLY2r341g2us4KzYMOI4JX7k%2FO3XldXZOuWZSOcUNgwDHC6I4%2Fxe7HZWdQmr42ERcHtoV17ndzV0lt6dIlIKqD%2B9afA6s9kI2Q%3D%3D\"}]}\r\ncf-ray: a489c015bd894c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5813\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26824,"size_decoded":6730,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26824), with no line terminators","md5":"cdddd0006601bc36bf1b83eacfd10e29","sha1":"e28975a8917c91ea76a8413e24b01018e7d7b3d6","sha256":"64039bc0ea1375a941b82283d361c2834f16468a7c2b493db5e7ad88cd3cc33b","sha512":"fe89e165e64cdad38a03640eab476ad568459974ff28448ed44bff1dc977bc614659689b95c48810c12fd7c6236fa39b00a2999ed1264b4c7cd2a8864e909d26","ssdeep":"768:MtPx6joDcFDTHjIroxo6o5oXC1eZRcjC1LlJtmxTwQYJC7YuU92tfSrgt8zQmIFN:4Px6ZUGC1eZRcjulLmxTwbaZSnWhdcPI","tlshash":"a9c272a667002a3604fe17e7f5deabc47671149ffa0944115839cc1e29a8fc361f1afa","first_seen":"2026-09-08T16:16:35.55054Z","last_seen":"2026-10-11T00:37:07.958805Z","times_seen":555,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/ultimate-addons-for-gutenberg/assets/css/spectra-block-positioning.min.css?ver=2.20.4","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.743Z","timestamp":1791678564743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/css/spectra-block-positioning.min.css?ver=2.20.4 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"14f-6abbcfdc-494085;br\"\r\nlast-modified: Tue, 29 Sep 2026 14:49:00 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lmPDdXBGaVRcEYXiCbAjjacXz6Xb8p%2BNdFwGp%2BpIf6uF5O9AJk1fimfhnuMjgB9nkLyV2AzZpAS2%2FTTtSAPqNSmJQNmGwxERwkhvJFe%2BPLk091zMEKeRKUHPhA%3D%3D\"}]}\r\ncf-ray: a489c0159d7a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 139\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":335,"size_decoded":1045,"mime_type":"text/css","magic":"ASCII text, with very long lines (335), with no line terminators","md5":"7b197104afdf6f3f918fd92a5aa1c657","sha1":"f40aef07a4afcbe679aaff6f3a8cef6a20cb1fe6","sha256":"edba0fcba74296c16b2ce9016b6fb6f20c7cf68f3d48665c6d5fd3947824b449","sha512":"24dd57053c08b906a9ebb9ca256b09fdd6ce2cd6e62b1a923fb163d5b992b5edf99717f05bffc820e3fe5abb6d420420d971eb44094773c64fb802b7b3c18304","ssdeep":"","tlshash":"58e0df5197007ea1d867b34925e658148230ce00dfd22cbd732ad383f2c309018b3bc8","first_seen":"2024-10-13T03:11:06.747915Z","last_seen":"2026-10-11T00:37:48.302828Z","times_seen":7957,"resource_available":true,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.750Z","timestamp":1791678564750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"3509-675e4e01-4988a4;br\"\r\nlast-modified: Sun, 15 Dec 2024 03:33:21 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYF4CRQQ%2FA6%2B%2BH5%2FF9li%2FZrNnC2b0gBC3WERb%2F5yb33cBdMIa%2F%2BOzcmeDdknAJcEJnkvXaylU96zvE58W5PTjSoVjKufrd7Mk1H1svAsg7lrbUHYvdTGTYcBOQ%3D%3D\"}]}\r\ncf-ray: a489c015ad854c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4679\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":5602,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T03:43:27.341778Z","times_seen":1003624,"resource_available":true,"data":null}},"time_used":843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":843,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/uagb-button-child.min.js?ver=2.20.4","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.763Z","timestamp":1791678564763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/uagb-button-child.min.js?ver=2.20.4 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"1a5-6abbcfdc-494107;br\"\r\nlast-modified: Tue, 29 Sep 2026 14:49:00 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rf5RHTP0yN0NeF02fOjRT3iir4jWt%2FBSV2yOx0HSs1hkjEi%2Bu9yarwTeAeH4XK8KTIq8St7gd9RhZA2XlpRC6%2BGHfK4F2xohMf18UmGkDRBUPSvyJtCzHekwXw%3D%3D\"}]}\r\ncf-ray: a489c015bd944c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 203\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":421,"size_decoded":1114,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (421), with no line terminators","md5":"56cdc01d88461d9332895e3487ca954a","sha1":"9e1f77b7387f8f489b4cc9793be930b93b237f48","sha256":"8a141c1f5150e1fd5b07d095c5b41be07116255fc2e5431ef66205bb7dc4a74f","sha512":"6aae208ba50317a997a3a6aa5fbf2f3cd3840614bfd38b8226cc7b3b687b64ba0658bf062943d45c825938b7259f15bd09f6ffab10faa64e8a7496a1f04ebcb7","ssdeep":"","tlshash":"57e0e5f0630d4ab618e9d9a63669fbc4275681de60512805bc2aacf9298c680209226b","first_seen":"2024-05-07T04:32:10Z","last_seen":"2026-10-11T00:48:11.605689Z","times_seen":5657,"resource_available":true,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":848,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/uploads/astra-addon/astra-addon-6abbcff62a5172-95431426.js?ver=4.13.10","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.768Z","timestamp":1791678564768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/uploads/astra-addon/astra-addon-6abbcff62a5172-95431426.js?ver=4.13.10 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"a93d-6abbcff6-4784ed;br\"\r\nlast-modified: Tue, 29 Sep 2026 14:49:26 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FfoJqZkVXetfRFDULMXpGPx8QW8DHgHPImXWhoUjo6BJin4qrerk5n%2BblNc%2FQbIzv8MOUo0WuposbHSs3pdnSqYn5BdIZPg%2B0JREWOaGtEfqA5vZvMRHiiWtiw%3D%3D\"}]}\r\ncf-ray: a489c015cd974c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8474\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43325,"size_decoded":9389,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (43325), with no line terminators","md5":"19c36fa7956aa1b624167cb1f3bed2f9","sha1":"64281c1e4488369f9c63daa2c24b6b2d8fa863c6","sha256":"e678fa9d832b4adbec6113c671df2c249b6ad49787f695a45d28d4cf3f261b66","sha512":"ddb8a0007955e3914df10a942731850a11806aa6e1c7300f81be9d211a6e54e187b1ee4638a43dbe5e753d59f9cfeb9d5687b59b6ceac1ea55b9cc7a5796bcf8","ssdeep":"768:MNtI2IhuuOwyCwXIFORPV89LLE3XxGEx5WiTE3tcg/qhxOGaEfJOJMBqLzgygGHj:qLm66OlcEqLjT2w1","tlshash":"2c13ea58631435f900bf07e6e42da94c71a2ca3fa3ae00517599897f1898fa162f1f7e","first_seen":"2026-09-26T13:41:09.381587Z","last_seen":"2026-10-11T00:37:07.963488Z","times_seen":49,"resource_available":true,"data":null}},"time_used":856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":856,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdm.life/wp-content/uploads/astra-addon/astra-addon-6abbcff629a217-83192703.css?ver=4.13.10","fqdn":"cdm.life","domain":"cdm.life","tld":"life"},"ip":{"addr":"104.21.69.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cdm.life/","date":"2026-10-11T00:29:24.747Z","timestamp":1791678564747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdm.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 20:00:58 GMT","end":"Mon, 30 Nov 2026 20:58:24 GMT"},"fingerprint":{"sha1":"AB:E6:0F:09:F2:B4:BC:2A:C3:53:A0:7B:07:86:C6:B1:24:91:E2:81","sha256":"3B:71:3B:3D:E8:A5:24:E4:DF:63:29:9B:98:66:53:5F:51:D8:64:5D:90:EF:09:EC:20:D9:47:58:40:4D:A7:82"}}},"request":{"raw":"GET /wp-content/uploads/astra-addon/astra-addon-6abbcff629a217-83192703.css?ver=4.13.10 HTTP/1.1\r\nHost: cdm.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdm.life/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 00:29:25 GMT\r\netag: \"d1b5-6abbcff6-47823e;br\"\r\nlast-modified: Tue, 29 Sep 2026 14:49:26 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:29:25 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-frame-options: \r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvxRt36usUgIPS6zrhDYRuBIOLsRQs%2F6o8Sb315ciYLtPkbo0sIs8ZoA3weHY7%2FKXlHgMDLyAs%2BTs4MR1zWa7cyJIir4XBMLWNCVGUKO8WCuj%2BWbWSb1l3Lqfw%3D%3D\"}]}\r\ncf-ray: a489c015ad824c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":53685,"size_decoded":7308,"mime_type":"text/css","magic":"ASCII text, with very long lines (53685), with no line terminators","md5":"3fdf774dd5cc2ee9897cb833f8fd0707","sha1":"a3ef9f484c317060e327d60e137f9345da0477f6","sha256":"04bf487d71c5d4b721c788303a6b9f3c1263ac47a16573295b4193d98568d6c8","sha512":"47d7dfa278d77f842fc1a39f55ad4a07f95a27442ab4fc13c647ed0a9789bc0b81bdf0be20f8b034469b3e36c8bfcc4152feb70a53e626a0daf175daaf8106d9","ssdeep":"768:X0SEnEZgfj0vvhkdKQXD0NMSr6GnuJaAOVw9:X2nIv9QT9","tlshash":"33331f918bc538352432f369d89afd1857a99b13b6ed60c7f2fd421e4e8878950f0e1e","first_seen":"2026-08-21T20:00:46.53372Z","last_seen":"2026-10-11T00:37:07.964283Z","times_seen":10,"resource_available":true,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":848,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"cdm.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}