{"report_id":"31fef759-9329-4664-b3c3-f11b9a50ba05","version":0,"status":"done","tags":[],"date":"2026-09-19T11:43:28Z","url":{"schema":"http","addr":"teslaassembly.org/","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"92.113.23.169","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"teslaassembly.org/","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"title":"teslaassembly.org","dom":{"size":69360,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20716)","md5":"3e734e487a0ac0f4bc2af94d50cac33b","sha1":"590fb774b45ae823a0627c0132266ac3483cd77f","sha256":"6d4c68192b508a36f0ce2ad9657cabe74487d3b9ff38aa94e78b2f81355e1552","sha512":"e0079f6d9fd0bd20a270fbe344e4052a27fc3179c181b5a2ed4b6e8ac216088c2dd73ae7a17edcbd827135ad172aa50188e3c013370c17b5838f14be37714243","ssdeep":"1536:tDcBRiBmgT0cTrnbO2IH05ypDz1nT81ZbbXemlUVuXw0mGAxh8RRy:tDcBRiBmgT0cTrnbO2IH00gZbbXemlUL","tlshash":"1b6397a157b448f5797f833b9e44a2145127e902ca0977e5b0f3e294b58cfb606e3b0b","dom_hash":"domhash5637e7c3062fddc4a7a2ccf8b73fe8d4","first_seen":"2026-09-19T11:01:01.207157Z","last_seen":"2026-09-19T11:43:34.342874Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"teslaassembly.org/","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"92.113.23.169","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T11:43:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-19","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"teslaassembly.org/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"teslaassembly.org","ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"domain_registered":"2020-10-18","domain_rank":0,"first_seen":"2020-12-27T07:29:02Z","last_seen":"2026-09-19T11:01:00.929369Z","alert_count":33,"request_count":8,"received_data":207544,"sent_data":4101,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:7.0.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"teslaassembly.org/wp-includes/js/wp-emoji-release.min.js?ver=7.0.4","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-24T12:27:59.344494Z","times_seen":61171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teslaassembly.org/hostinger-reach-subscription-block-view-js-extra","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"27602f96a12912aaf0e5ed70cc1a4385","sha1":"0b8430c6d85a91d7e57391fde34a32e3f949194e","sha256":"9e33d577dcce61e2f215e9f183061dc82bebe5db61e21a0533f14dc0155093a6","sha512":"2019247bd803b5621afdd811b0c712e12c6c3ccd6eadbebf89595ceb4d801eb0b32050bcf6593dbfe2b7b61d6500cc9639f0abd43f89346dfbefa8493725dd9a","ssdeep":"","tlshash":"9a01e2c0eb7f3a4d090e473249f6ed8d00945d84c05388728fa882808124206ae9e393","size":773,"data":"","first_seen":"2026-09-19T11:01:01.214334Z","last_seen":"2026-09-19T11:43:34.349869Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teslaassembly.org/wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription-view.js?ver=1784043575","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"167d457c11c521229898077d5c42fd20","sha1":"bc2d569367ccf84b76b6bb548d236f0430421857","sha256":"9c1afefb7e675d365d776ace1f36d52f59b77dbf2a6f0977ca34239478b5799e","sha512":"20c06317b0d57fb2384a18aeac4a26ffcf7defab92f8eb82cb3d5cd43d56d863c193c556211e5d290215c61fa5cd8855d07934163262de5931454f3d9433adf2","ssdeep":"96:ZwZjk1O9wCp1v6qWCmxFkdtgECbaoNYbvHsbB8xjEGrVQS8O98y9NF5tuO:ZwZjqO2Cp1v6xCkS3CJYbvrjESSSD98Q","tlshash":"3fc1b58578d2f4b503ef70b5c02f544ff139ea55a8488892c658d8e17c786fa8623e9e","size":5998,"data":"","first_seen":"2026-07-03T14:53:08.889572Z","last_seen":"2026-09-23T13:58:12.250067Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teslaassembly.org/wp-includes/js/wp-emoji-loader.min.js","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f77624e014f2782032117bcba346374","sha1":"a440bf263bc7c584c9e1405f4b0fd044e19cd1e6","sha256":"49a0a8a0cc17156c9d8c07a3b4e95b67dc986274c505f193d497089abd6a959b","sha512":"ef4ffa59fac80edeb1a0ff809ffffd2dc766c695ecc91f6ff5371f3d548ba6694abd860c743953efb9ef183cc90c06483d3d12d0b8cc17d528383ae1c6e97002","ssdeep":"","tlshash":"25619659eb7938df33fa01f3653a4d47eb614436e784d438c9ae631424b1893c375a1a","size":3340,"data":"","first_seen":"2026-09-19T11:01:01.215816Z","last_seen":"2026-09-19T11:43:34.350517Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teslaassembly.org/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"be31fdf0c1b991d4ae62d43750c29004","sha1":"2741b37b0171acf8ea67d90ab0927259adf9d66d","sha256":"caf7ad56bd767d2bb8c5b78dfd3c2c4e005e7d01abca7314fbaffed99c7df69d","sha512":"6bc44dd8afdcb3d01143df983b3a5c20300b0a1e9e5cf7d24d04544b2a186d8b1d0d684164489fb0eba865c4d0247001a0e37b1af65b432f03b6e3d02999f71d","ssdeep":"","tlshash":"bc517578336075b5caff4384f224d538b365dec1440b28017d2926df26aefa181e1f6a","size":3053,"data":"","first_seen":"2026-04-07T19:24:43.304892Z","last_seen":"2026-09-24T05:26:16.242106Z","times_seen":9075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teslaassembly.org/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","size":40106,"data":"","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-09-24T12:39:29.634313Z","times_seen":11984,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-19","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"teslaassembly.org/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"teslaassembly.org/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teslaassembly.org/","date":"2026-09-19T11:42:59.612Z","timestamp":1789818179612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teslaassembly.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 14:29:28 GMT","end":"Fri, 11 Dec 2026 14:29:27 GMT"},"fingerprint":{"sha1":"FE:4F:5A:37:D5:16:20:ED:7A:AC:FA:F0:DE:83:67:D2:C4:92:4B:C5","sha256":"9F:75:C6:AC:5F:43:78:57:76:6B:36:1F:BB:19:40:BB:B2:FF:72:DC:FB:12:BF:63:EC:32:A8:C9:3A:D7:AB:84"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1 HTTP/1.1\r\nHost: teslaassembly.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://teslaassembly.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 11:42:59 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 14863\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 01:15:45 GMT\r\nlast-modified: Tue, 14 Jul 2026 15:38:28 GMT\r\netag: \"9caa-6a5657f4-b745173f612b370f;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 499082\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6352abb0d5d8d3605a7c310b27be3c2b-dus-edge2\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":40106,"size_decoded":15424,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (40105)","md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-09-24T12:39:29.634313Z","times_seen":11984,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-19","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"teslaassembly.org/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teslaassembly.org/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teslaassembly.org/","date":"2026-09-19T11:42:59.614Z","timestamp":1789818179614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teslaassembly.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 14:29:28 GMT","end":"Fri, 11 Dec 2026 14:29:27 GMT"},"fingerprint":{"sha1":"FE:4F:5A:37:D5:16:20:ED:7A:AC:FA:F0:DE:83:67:D2:C4:92:4B:C5","sha256":"9F:75:C6:AC:5F:43:78:57:76:6B:36:1F:BB:19:40:BB:B2:FF:72:DC:FB:12:BF:63:EC:32:A8:C9:3A:D7:AB:84"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9 HTTP/1.1\r\nHost: teslaassembly.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://teslaassembly.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 11:42:59 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1003\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 08 Sep 2026 15:07:55 GMT\r\nlast-modified: Tue, 14 Jul 2026 15:38:28 GMT\r\netag: \"bed-6a5657f4-9877ab14c6cbd78d;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 499082\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 346b020a83ccbcb3b8f6c7ed7ae44ec7-dus-edge2\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":3053,"size_decoded":1562,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (3052)","md5":"be31fdf0c1b991d4ae62d43750c29004","sha1":"2741b37b0171acf8ea67d90ab0927259adf9d66d","sha256":"caf7ad56bd767d2bb8c5b78dfd3c2c4e005e7d01abca7314fbaffed99c7df69d","sha512":"6bc44dd8afdcb3d01143df983b3a5c20300b0a1e9e5cf7d24d04544b2a186d8b1d0d684164489fb0eba865c4d0247001a0e37b1af65b432f03b6e3d02999f71d","ssdeep":"","tlshash":"bc517578336075b5caff4384f224d538b365dec1440b28017d2926df26aefa181e1f6a","first_seen":"2026-04-07T19:24:43.304892Z","last_seen":"2026-09-24T05:26:16.242106Z","times_seen":9075,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teslaassembly.org/wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teslaassembly.org/","date":"2026-09-19T11:42:59.661Z","timestamp":1789818179661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teslaassembly.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 14:29:28 GMT","end":"Fri, 11 Dec 2026 14:29:27 GMT"},"fingerprint":{"sha1":"FE:4F:5A:37:D5:16:20:ED:7A:AC:FA:F0:DE:83:67:D2:C4:92:4B:C5","sha256":"9F:75:C6:AC:5F:43:78:57:76:6B:36:1F:BB:19:40:BB:B2:FF:72:DC:FB:12:BF:63:EC:32:A8:C9:3A:D7:AB:84"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2 HTTP/1.1\r\nHost: teslaassembly.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://teslaassembly.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 11:42:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 53600\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 26 Sep 2026 00:01:41 GMT\r\nlast-modified: Tue, 14 Jul 2026 15:38:28 GMT\r\netag: \"d160-6a5657f4-eba168b81f8d6d10;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2553\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a97379407ce72a1571031ddbe17a8f77-dus-edge2\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":53600,"size_decoded":54123,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53600, version 1.0","md5":"a8ebc7eb54efacfda66d0a2531058ecd","sha1":"5b56dbe3d3eabe178719988f4fee76d9d4ad7079","sha256":"ce340d48531930f3f2c8b7c47d149f82c9f4413548dd216e0f4d9af94a87c374","sha512":"bde7ef9fa476ae2bf7220afadc1285dec21f1a51718f3633a82cd4d08ac0adafd02acf01db82b3c263ab8a87e2cb18a03830f302d664f4441629ec24678bf2ac","ssdeep":"1536:GcCtX6JRTj6XLzm1OSRKt9Vo3IGC9pT/UTQ+z/y:qX6DWXPmwSRIVPGC9pTREy","tlshash":"203302d1f44038206c75e3fbddecfb9434ea81aaf53945d384a658bc0f8056addb0264","first_seen":"2023-11-30T06:19:19Z","last_seen":"2026-09-24T07:49:53.553953Z","times_seen":13214,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teslaassembly.org/favicon.ico","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teslaassembly.org/","date":"2026-09-19T11:42:59.726Z","timestamp":1789818179726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teslaassembly.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 14:29:28 GMT","end":"Fri, 11 Dec 2026 14:29:27 GMT"},"fingerprint":{"sha1":"FE:4F:5A:37:D5:16:20:ED:7A:AC:FA:F0:DE:83:67:D2:C4:92:4B:C5","sha256":"9F:75:C6:AC:5F:43:78:57:76:6B:36:1F:BB:19:40:BB:B2:FF:72:DC:FB:12:BF:63:EC:32:A8:C9:3A:D7:AB:84"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: teslaassembly.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://teslaassembly.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 19 Sep 2026 11:42:59 GMT\r\ncontent-type: text/html\r\ncontent-length: 1626\r\nlast-modified: Tue, 22 Apr 2025 07:57:10 GMT\r\netag: \"119f-68074bd6-c51ecb99dd6201fc;br\"\r\ncontent-encoding: br\r\ncontent-security-policy: upgrade-insecure-requests\r\nplatform: hostinger\r\npanel: hpanel\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 20c773a52e3503f96f95433109d87e65-dus-edge2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":4511,"size_decoded":2031,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-09-24T11:34:56.504195Z","times_seen":41169,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teslaassembly.org/wp-includes/js/wp-emoji-release.min.js?ver=7.0.4","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teslaassembly.org/","date":"2026-09-19T11:42:59.820Z","timestamp":1789818179820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teslaassembly.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 14:29:28 GMT","end":"Fri, 11 Dec 2026 14:29:27 GMT"},"fingerprint":{"sha1":"FE:4F:5A:37:D5:16:20:ED:7A:AC:FA:F0:DE:83:67:D2:C4:92:4B:C5","sha256":"9F:75:C6:AC:5F:43:78:57:76:6B:36:1F:BB:19:40:BB:B2:FF:72:DC:FB:12:BF:63:EC:32:A8:C9:3A:D7:AB:84"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0.4 HTTP/1.1\r\nHost: teslaassembly.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://teslaassembly.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 11:42:59 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 4916\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 05:52:50 GMT\r\nlast-modified: Tue, 14 Jul 2026 15:38:28 GMT\r\netag: \"58e0-6a5657f4-a21cea2eeba84a82;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2553\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5979757d05cf8d0422f40983fa6b53a1-dus-edge2\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":22752,"size_decoded":5474,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-24T12:27:59.344494Z","times_seen":61171,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teslaassembly.org/","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T11:42:59.087Z","timestamp":1789818179087,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teslaassembly.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 14:29:28 GMT","end":"Fri, 11 Dec 2026 14:29:27 GMT"},"fingerprint":{"sha1":"FE:4F:5A:37:D5:16:20:ED:7A:AC:FA:F0:DE:83:67:D2:C4:92:4B:C5","sha256":"9F:75:C6:AC:5F:43:78:57:76:6B:36:1F:BB:19:40:BB:B2:FF:72:DC:FB:12:BF:63:EC:32:A8:C9:3A:D7:AB:84"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: teslaassembly.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 11:42:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.33\r\nlink: \u003chttps://teslaassembly.org/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 25 Sep 2026 01:46:22 GMT\r\netag: \"127-1789695982;br\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2554\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: c670372cdf0305159942f170fe30f432-dus-edge2\r\nx-hcdn-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:7.0.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":69380,"size_decoded":18614,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20716)","md5":"451dd4bb379887f2611e222fd0976a8d","sha1":"98690f47171257ed41246b4b04d188d93b256d2d","sha256":"c49ab18d94cc2fbd98b78b83ac2f945b480de99ad4713cf20e2852161e87138d","sha512":"1c8d2030d887cb51fdae82bf8228927b98f361521aae0d6039dabc7cd428a4039c6f4d3322d9a5de8cac4200c809c73b3e5aee9958002030eae1d49ac967778e","ssdeep":"1536:4VcBRiBmgT0cTrnbO2IH05ypDz1nT8UZxpm4wvSAIXu7VxAxh8RRt:4VcBRiBmgT0cTrnbO2IH00rZxpm4wvSu","tlshash":"0d6396a057b448f5797f833b9e44a2145627e902c90977d5b0f3e294b58cfa606e3b0f","first_seen":"2026-09-19T11:01:01.209787Z","last_seen":"2026-09-19T11:43:34.348015Z","times_seen":2,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":37,"connect":24,"send":0,"wait":26,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teslaassembly.org/wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription.css?ver=1784043575","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teslaassembly.org/","date":"2026-09-19T11:42:59.610Z","timestamp":1789818179610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teslaassembly.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 14:29:28 GMT","end":"Fri, 11 Dec 2026 14:29:27 GMT"},"fingerprint":{"sha1":"FE:4F:5A:37:D5:16:20:ED:7A:AC:FA:F0:DE:83:67:D2:C4:92:4B:C5","sha256":"9F:75:C6:AC:5F:43:78:57:76:6B:36:1F:BB:19:40:BB:B2:FF:72:DC:FB:12:BF:63:EC:32:A8:C9:3A:D7:AB:84"}}},"request":{"raw":"GET /wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription.css?ver=1784043575 HTTP/1.1\r\nHost: teslaassembly.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://teslaassembly.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 11:42:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 973\r\ncache-control: public, max-age=2592000\r\nexpires: Sun, 04 Oct 2026 06:59:36 GMT\r\nlast-modified: Tue, 14 Jul 2026 15:39:35 GMT\r\netag: \"f02-6a565837-2a51e624f92efc66;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1313003\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e95c48eddddd307526c573f9c1552011-dus-edge2\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":3842,"size_decoded":1517,"mime_type":"text/css","magic":"ASCII text, with very long lines (1741)","md5":"c41cf97dcda43faefdccb83e77410efb","sha1":"46f64e2a0db4744150c8a88a15ae8a83d9c473de","sha256":"bf4a8bc9902e145d850327136db3343d196709966ca31d78b4fc16e82cd47e2b","sha512":"43ee79cc6dba3784b64cc7bedc2231c0ab70fc7e028fcf2eabe275590bb854810ffbf92d99c7a522b07e995a719122989620bdbe38b47319abb871fb3296bc66","ssdeep":"","tlshash":"9d818d34553cbefea22b50720de1458ef398460fd10a5ad6cca5d0e4a28dfb12d96f87","first_seen":"2026-06-30T13:17:25.253336Z","last_seen":"2026-09-23T13:58:12.241618Z","times_seen":522,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teslaassembly.org/wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription-view.js?ver=1784043575","fqdn":"teslaassembly.org","domain":"teslaassembly.org","tld":"org"},"ip":{"addr":"88.222.222.48","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teslaassembly.org/","date":"2026-09-19T11:42:59.611Z","timestamp":1789818179611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teslaassembly.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 14:29:28 GMT","end":"Fri, 11 Dec 2026 14:29:27 GMT"},"fingerprint":{"sha1":"FE:4F:5A:37:D5:16:20:ED:7A:AC:FA:F0:DE:83:67:D2:C4:92:4B:C5","sha256":"9F:75:C6:AC:5F:43:78:57:76:6B:36:1F:BB:19:40:BB:B2:FF:72:DC:FB:12:BF:63:EC:32:A8:C9:3A:D7:AB:84"}}},"request":{"raw":"GET /wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription-view.js?ver=1784043575 HTTP/1.1\r\nHost: teslaassembly.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://teslaassembly.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 11:42:59 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 2486\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 15:28:17 GMT\r\nlast-modified: Tue, 14 Jul 2026 15:39:35 GMT\r\netag: \"176e-6a565837-a0bb0b5d4d7b305f;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 499082\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a866ee9128a7d3d1196187afcdd8014e-dus-edge2\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":5998,"size_decoded":3046,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5952)","md5":"167d457c11c521229898077d5c42fd20","sha1":"bc2d569367ccf84b76b6bb548d236f0430421857","sha256":"9c1afefb7e675d365d776ace1f36d52f59b77dbf2a6f0977ca34239478b5799e","sha512":"20c06317b0d57fb2384a18aeac4a26ffcf7defab92f8eb82cb3d5cd43d56d863c193c556211e5d290215c61fa5cd8855d07934163262de5931454f3d9433adf2","ssdeep":"96:ZwZjk1O9wCp1v6qWCmxFkdtgECbaoNYbvHsbB8xjEGrVQS8O98y9NF5tuO:ZwZjqO2Cp1v6xCkS3CJYbvrjESSSD98Q","tlshash":"3fc1b58578d2f4b503ef70b5c02f544ff139ea55a8488892c658d8e17c786fa8623e9e","first_seen":"2026-07-03T14:53:08.889572Z","last_seen":"2026-09-23T13:58:12.250067Z","times_seen":295,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"teslaassembly.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}