{"report_id":"3c67e074-7763-484b-9d2f-87636b297c12","version":0,"status":"done","tags":[],"date":"2026-09-11T19:29:51Z","url":{"schema":"http","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"title":"CR Digital Defences |","dom":{"size":168515,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26347)","md5":"2a2567e67a47c4a7ff25938e59d34a24","sha1":"d20b7c153ddd6f1dd3e78bafaeda750018038464","sha256":"ace7db5631b10f4dc23a2c38eb00a92046e2cf4f441ed9e3ef449dc5aad65050","sha512":"3e4a45a6f99f68af7faf782bcab8c606399a0716c5598217d9a8c1243e82b2507e459f03975579a71ef94b92e668f552554f8eba508802c33b8ab32005ae6987","ssdeep":"3072:ileYwX4kcvEnAWb2dmwBjJy51ah93389CNww3yW:Dr4kcvEnDby7","tlshash":"ecf31b5ed7ba3075310b0365b8d5932491ecc233eb510ed2f8fad1289bc5aa615bb21f","dom_hash":"domhash82709e7644e498b7058d180041ff423c","first_seen":"2026-09-11T19:29:57.735866Z","last_seen":"2026-09-11T19:29:57.735866Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T19:29:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"csp.secureserver.net","ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1998-03-30","domain_rank":62352,"first_seen":"2022-12-18T21:17:09Z","last_seen":"2026-09-07T11:59:00.265701Z","alert_count":0,"request_count":2,"received_data":1016,"sent_data":1098,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":2,"received_data":96465,"sent_data":1282,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img1.wsimg.com","ip":{"addr":"95.101.11.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2008-03-17","domain_rank":58983,"first_seen":"2012-06-20T14:42:31Z","last_seen":"2026-09-07T13:18:07.678534Z","alert_count":0,"request_count":3,"received_data":129794,"sent_data":1458,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":5,"received_data":203401,"sent_data":2881,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cr-digitaldefence.com","ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-04-10","domain_rank":7274063,"first_seen":"2026-09-11T19:28:05.688835Z","last_seen":"2026-09-11T19:28:05.688835Z","alert_count":74,"request_count":37,"received_data":18194220,"sent_data":27829,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:7.0.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.trustedsite.com","ip":{"addr":"143.204.238.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2004-06-07","domain_rank":488559,"first_seen":"2017-07-12T20:31:14Z","last_seen":"2026-09-08T18:57:00.705639Z","alert_count":0,"request_count":1,"received_data":22002,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s3-us-west-2.amazonaws.com","ip":{"addr":"52.92.191.24","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":1196509,"first_seen":"2017-01-29T12:21:01Z","last_seen":"2026-09-10T14:02:14.974061Z","alert_count":0,"request_count":2,"received_data":2134,"sent_data":1072,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"cdn.ywxi.net","ip":{"addr":"143.204.238.60","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-17","domain_rank":91208,"first_seen":"2013-12-29T10:29:16Z","last_seen":"2026-09-05T09:15:13.02998Z","alert_count":0,"request_count":2,"received_data":21850,"sent_data":1093,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.trustedsite.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2004-06-07","domain_rank":184781,"first_seen":"2017-01-30T00:22:54Z","last_seen":"2026-09-06T20:56:36.602556Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":498,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cr-digitaldefence.com/dsm-easy-theme-builder-js-extra","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c36cafccbee41bcc521f9d47c47d2b6b","sha1":"db5520b37d0d125a031d23138db50648d412a302","sha256":"a4ac1e40393f2318cd47f98d10b38753b8134b6747074e99654e6348d1bfb1b3","sha512":"b642ab43ffa4c1ebc3f5ee17271478bac41c4a04b7fa00c91e45c719b1cd0ec530653e839c2cf02b288d2b82c4c29149678dc2b3dd374728472672677ec8fcde","ssdeep":"","tlshash":"5711804cc4f845783d17c4384751567ef1c71469e0950f0cd5dcddf40115e124665d05","size":1110,"data":"","first_seen":"2026-09-11T19:28:11.322081Z","last_seen":"2026-09-11T19:29:57.820392Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/plugins/supreme-modules-pro-for-divi/public/js/dsm-easy-tb.js?ver=4.9.97.41","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"1101961f65d69ee20dfa7ef944b50781","sha1":"c05fab44263894b4b2eec0bc1320a901635ee3cf","sha256":"913b0b034d2f5638882559dd5ffc399a05d47534939de8c6ab24dd0cb3fadabe","sha512":"a3d2bb9b72f971468047a02a06d7ad11861dc049d040c3063cd974de3f1ec41ba16f4ec4227d60b9e09bde26b908214f393efcfee2ceaa8f5da9eff56128772c","ssdeep":"96:0gCT+To/NlFtX7/ulPP5qGS+z1qG+++Rs:A/u35dDv","tlshash":"78b1293fd775b918783c8cacd0469e58da3d080a9fe91ea3d068a43e42cde76a1d644d","size":5329,"data":"","first_seen":"2023-03-08T03:40:58Z","last_seen":"2026-09-11T19:29:57.778044Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53ec3d6e21be78115810135f5e956fe","sha1":"523892839b88351523e0498ba881c4431197b54e","sha256":"b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f","sha512":"84b080eaaa043928f038421ceb18bba7483afee5b6480a92ee01992317cde2361a6dd255b16ec036e51e8a1fef46b5379c6a5ff5c9ec69d682f96deaa03a8842","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7","tlshash":"14f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","size":158005,"data":"","first_seen":"2023-03-08T14:26:25Z","last_seen":"2026-09-11T21:25:35.610804Z","times_seen":58450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/mediaelement-js-extra","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"adf654118ab20feccfee211db8cd548b","sha1":"08281bb447d80e76ba31fec012ced8c92d7278e0","sha256":"78dfedb7e672879b7060e8ace0dc8a9db803d5687bf719bbd3ac3ca4ff801ab9","sha512":"3619e94e16b1116316c9ef89e4a42b241fb183f2c762c826f708aa07133befb1da7929d81de4c5f1c959977f07d9fee6e527eff70a3508ad4a3c2935d228661a","ssdeep":"","tlshash":"6721a7d8fb29031403db893d051a422d854e4fb7c1029d3faebc786a09bfd846152e21","size":1191,"data":"","first_seen":"2026-05-22T19:33:27.829232Z","last_seen":"2026-09-11T19:29:57.821692Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=7.0.4","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a5c9689ae636c452b6808740ba04136","sha1":"8d2c85d7779d00c12aeb6b55a99443952d9a144e","sha256":"79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45","sha512":"a80491b5c34e4719b042d1ef0dc8cff0e2ad29343ac8926a3cab36202b02dc360000b430b3141e474fe08bffc54329eb47082d530af6b44727490c4cd0f0ed0c","ssdeep":"","tlshash":"ee11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","size":1107,"data":"","first_seen":"2023-03-29T22:52:25Z","last_seen":"2026-09-11T21:25:35.580686Z","times_seen":55435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/plugins/supreme-modules-pro-for-divi/public/js/swiper-bundle.min.js?ver=4.9.97.41","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"adf4d8a8269c6de5a15e081e838d47a0","sha1":"f64bdee46be3b38377cc333baa08b5d091cd878e","sha256":"568c3ba372e075ecceb821409f5d45be311c896c3c784910eb5f2f20e5c90670","sha512":"6ad0678a60f047ec98d3e5d818af3f20bbb21e64b05345ab2386f204e39a2a360fced67b565b1adc31f7f361aab9cdfcb46bedf1d56b7b61ef1c562129d45e5d","ssdeep":"3072:Fo6dezM8ABXhOoMcrOpADH79cVOd3dqIrv9:G6diMNOoMcrOpADH79cVOd3dqIrF","tlshash":"cce31789b364b2a151e73256539ed10263b65805b80ad1a470768cd7acbde8c03bfffd","size":145857,"data":"","first_seen":"2023-03-07T12:23:22Z","last_seen":"2026-09-11T19:29:57.807066Z","times_seen":1173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef5cf85f5319541b973cec298560e3db","sha1":"4e6b7bbc4d565b965a1db971597f340464e99577","sha256":"54354334d453444ba9c144d69eaea2b5a35d7354c511515b5d5e319404bb1a8c","sha512":"ab47f12cb8484093d5b53c17e866e3a465c669218749d05f31cb28ca3f6bbfb3281b81d9ae267a164d455a5a55221c90785a873f4f57ae2c65e25350819a06e9","ssdeep":"","tlshash":"1390047170114c34074d100d713cc3d43cf4405077433c00c07c504c0070dc34400d4c","size":42,"data":"","first_seen":"2023-03-07T01:16:43Z","last_seen":"2026-09-11T21:48:43.443675Z","times_seen":10161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"89125ad04aa60b44b078bda9f3a1ca29","sha1":"9c277746a57e669b793154fd2a4291fbbd4b5ace","sha256":"82fdf6f7dd07c87fa7c1455e2a0029f9c18aa81ba304576d2f689d5d55480f5b","sha512":"8bc579d1bc746de32705e5ae88861ec14705bcaa47e75b6b42ac1382a6874489fbd761460770b715c16715c40ddc4b19ad343088cb4d4be90189c215994f8e99","ssdeep":"","tlshash":"96011e195e12e2dc55b2652ef13b43b879ff770730d6909da90c645d1c1ce1974226fc","size":735,"data":"","first_seen":"2023-03-07T12:56:05Z","last_seen":"2026-09-11T21:48:43.444299Z","times_seen":6967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cb0435fb6ba10869497f9fd09d72b10","sha1":"42ef3655cbf2afe82fbce6427a2d7540dd2f7d29","sha256":"27f1693733f6e44cfeb8f73c98537a3ad33bc45c3c82f3ac352f57eb7657fd71","sha512":"a80c89849ade3a8428b5666ae9dfa76d3004418901e18b20bee9fb4ba46b9cc7ea8f8ad87a2c643646b093d1bc1b0f0aed0cf10cfd6f19b32fafa34a03251efb","ssdeep":"","tlshash":"07d0231d324cbfdd00f31814e43f5329507f673175564054514fe4542c3ed191153b80","size":208,"data":"","first_seen":"2025-12-11T13:04:04.267229Z","last_seen":"2026-09-11T21:48:43.444945Z","times_seen":4028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef91997ed47af9b0b3db27dc46c147de","sha1":"f14a212b6a65d480ea41be8e3933ffa52e4d7947","sha256":"40d8fe6f83c975ddf90798bfb9e5a700780d6b0705b6c088083df11db96a9649","sha512":"2fa5886e18a02b313ae4c091a07ce079e3175d07fe4e8d9a01900c3b3f218e6b227c5a492678e4c0461df8d0e595377dcf6389f20cffeaf254272e1d3b259cbd","ssdeep":"","tlshash":"773140a649491e322fb3409d782eef03d8a940b6f6c4ac08ebcd480903c9e526a23608","size":1623,"data":"","first_seen":"2026-09-11T19:28:11.327348Z","last_seen":"2026-09-11T19:29:57.824929Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"be9dde2468879737f187dbfd7815a4b9","sha1":"b3ac771ffa8e87bb914a165f62e3c4afb4fe7391","sha256":"15c97a4ad9e62f8028b23cf9c2057719eb7eb0220419ba1ce7f5d7546fac441d","sha512":"27421196df9f39809e50b4abfd7352d89c8eeca8c2c0d23e0610b10cbcaf3d33969689ac65cf3d6398930bfdf7de642a33b986626865382706bd455a12f5640a","ssdeep":"","tlshash":"41c0804c84f845783d1784184351567df1c71469e0550f0cd5dcddf40115e124665d05","size":161,"data":"","first_seen":"2026-06-14T18:27:26.967894Z","last_seen":"2026-09-11T19:29:57.826134Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f5d5a6f563e5c6f2adbd10bd0ff0916","sha1":"e0a25ed07e63f7e29645b5167cd285083accfdf2","sha256":"97a05395ca64d2013768233aa0a30ca49fc359a2d99954a699026f18f3c9b24e","sha512":"27a9b8dff1288008be7190a37f3b1f362e186b003f3edf57aa396550a0a9209ffcc07c47d3d14756b1df2b62bc67c8989e96c5a3004f14be1e034d573fe456e3","ssdeep":"","tlshash":"a341c91a8002383b07284396bc8a4bea85fdcba3d1814843a9ff4da9b2d7c386137654","size":2390,"data":"","first_seen":"2025-12-05T19:26:39.685602Z","last_seen":"2026-09-11T21:25:35.651528Z","times_seen":2800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd80bf8ae38a769c0d5c466606036851","sha1":"8978bd335ae8cff3e40c07628dd39c5560201707","sha256":"899d89673a80fe812900fb5eb895e8452af1eac17878e08a2ea254d1ca906b7c","sha512":"33fb6bbe4c1215aa283828b329303454b2796df570c765e6b2bc4ee4ad6cf1d25e65f507f3962fb6c29d4c0b2a012863ace6ea40554d06645526ed1c602b64ec","ssdeep":"","tlshash":"f1d0a7d83b29031403db451d0116422d854e4fb781029d3faeb8786a09bfd846152e21","size":231,"data":"","first_seen":"2025-12-05T21:42:41.22185Z","last_seen":"2026-09-11T21:25:35.652175Z","times_seen":4049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"dac16c9794858b4fa23fae2661abc4e7","sha1":"ce164b8044432ef22aaebee23133d8ed6d3cd4e6","sha256":"26bcda62f6e356e4d76c382a1087b7755e02c2bbf1427d9f4d076370000ec3b8","sha512":"19814aaf35fcd2deeddd0d7f2ba7c40c0563b722503a9a90186f1dee8c681c47bd5d929d82efae791031e3899e969ff140c994d02bc0bc904ac07c838bff5b38","ssdeep":"","tlshash":"52f02e1466342e365257d3e2606a5d5378ba20578df64888e9bc0e169fd279421c3e1e","size":482,"data":"","first_seen":"2026-06-21T10:38:12.24279Z","last_seen":"2026-09-11T19:29:57.828473Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"22e1207cc09f073efcd7a256958112af","sha1":"2efca224d3c0d8edc7cd864bf66d0164724a79f4","sha256":"7693baca76c53fc7891614940e0f4b2a17145d5668090fdce8311871524e36bb","sha512":"21cfc9fb84769d4476e922e4ceb13e3d19bd9be687284e8f94fd66d66a8015cef924560ff4a76a904cfab3c64010adedfa0a4ae97f757ae29ed3da897b35ecb2","ssdeep":"","tlshash":"4f1168085c0391605299184f3732989d623050fb1ed5b5a5ff2cc6390f4f99e4ab98b3","size":1049,"data":"","first_seen":"2026-09-11T19:28:11.331422Z","last_seen":"2026-09-11T19:29:57.829292Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a9846d5452eae5ba3ea77211d93d43e","sha1":"0865571280ff437d40eacc8b0a2beeefdaaa4db9","sha256":"107b854fc832809a763ca32c4e379f3da6a9a96fce0152e377972bc5905cb70c","sha512":"3ca291147264bf2b2d0dbc8f48a1ff13b073eb4897addc89a4c5f1e3851a5f8744f62124641aa21e3d90fb0dac6e84d84dfba9ec97cf5a8152e155396c565a5d","ssdeep":"","tlshash":"ecf081c5f3981caf47704513876b3330b36e6ba9617ac506588e4a11381e907a7e35e3","size":589,"data":"","first_seen":"2023-03-07T01:02:41Z","last_seen":"2026-09-11T19:29:57.830501Z","times_seen":2799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"56ad8d8cdac1d0e48cbb1ecefc4e10b6","sha1":"82a17170f875858e419c6ca81f71f8cea9b619f7","sha256":"21f2f0620476936458d35bff8503ca60c9a9b7a163e9837d68f8e8221839fbaf","sha512":"781c99aad69e3b77a3618d8e7f8b80cce44390b1bbf659d469c04ff7e872df82c4b9c0bc4883b596ee30b10ba97adb43ad11aa96679dd82024fd075b03623734","ssdeep":"1536:azZq1lDuiRGSW/3TV4vlV7mDHaQfzOIDz2Gi9:eCPW/8lj","tlshash":"77a3a788f6a1f07142e76165413f010bf279a966b0aed0d4e725e8f4adf85ce8173f29","size":106613,"data":"","first_seen":"2026-08-25T19:47:01.786054Z","last_seen":"2026-09-11T20:59:34.374864Z","times_seen":1646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-09-11T21:28:46.380751Z","times_seen":200644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"87b659c90b81604997dd06a67e8b773e","sha1":"bc13329ca575a3e32c93e0e1cf791f47f91b0c2f","sha256":"1ac445488ebead2ed0b74a9c86ad76fa1a81f363806218afb2ae4aae5f127448","sha512":"a2f82c520753c0b9093fec4ee7b367523cb2d7156efd5587b0c15b385661beda71050b73710a80f4d4ccc38d7921d5f01a590fa7744f204468dd63411d16509d","ssdeep":"","tlshash":"db90000c0a20c0882b00af00e000c202a0c2202f0220a38ce823bce2a83c888808fea0","size":39,"data":"","first_seen":"2023-04-11T03:58:47Z","last_seen":"2026-09-11T20:02:15.144716Z","times_seen":36414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-11T21:25:35.620017Z","times_seen":1054120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-11T21:25:35.601245Z","times_seen":964174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/divi-custom-script-js-extra","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c401c5c1e1495c77fbd931b1c997877b","sha1":"3783597ff0fce84e9764120ff1ba9320a947a6a8","sha256":"91928ce6700573133de1ecd2442f2bf4e3eca0551237a129f809bbd71839573c","sha512":"efe62f61adb2564697c1b89f4134b50e03fec9994e5771be73bc5486b6404f6c1b2eeb2a603e0ef7c1a8c861c8d650878d13559a4ec6447f4ffc7ba57352f9be","ssdeep":"","tlshash":"435142a6c9491e326fb344bd782eef03d8e94076f6c4ac08ebcd480903c9e526923608","size":2562,"data":"","first_seen":"2026-09-11T19:28:11.320162Z","last_seen":"2026-09-11T19:29:57.833381Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=7.0.4","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"51300497928562f8c86c7aaba99237cd","sha1":"e5826832b85c6afc6502b74cbb8ac5394b04c363","sha256":"6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f","sha512":"04bfdf1a41712238902bc6a0e07efaf356217e98560c52fa5d175c29191617c35853382ce2f69966bdd5e1b40114b872d962a5fad26a9e0b7d4fc016a6dcb833","ssdeep":"","tlshash":"c72121daa848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","size":1191,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-09-11T21:25:35.626552Z","times_seen":58807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js?ver=4.27.8","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"03ab81653ecf422276b76fa4e05c3684","sha1":"8ee7a7cb58e9276f406b4991905bd15db3868ae4","sha256":"69bf579b3b7d709f6b121e1a71d16837fbb1947bd9238710835676364891041f","sha512":"1f1277dc4f85cbd4bfe0ed527caf9212d10243e63551f28a5f96711a2707c76db83b05f7c070b1fe1c86d8d2d6d1f179b1f20e546937eee518e5546d8df43174","ssdeep":"3072:dixuJHV0hCtIyK24cN9CI9G34XcJ3OyUEIofe5Co:wu1V0hCtm3wG3CPEIoYCo","tlshash":"4d24d989b6d1f4b152e76069443f160af17a9c19704ae8c0e362e5e4ed7d98f6023f3e","size":210199,"data":"","first_seen":"2026-08-20T07:44:00.41429Z","last_seen":"2026-09-11T20:00:21.729482Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/jquery-js-after","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"07c7279e4fe027cb479070b5781000b9","sha1":"2392dd9e0813f5e8f5fe37bdaafd0bee4f931198","sha256":"cbca1b9e537c6d69d78b26c0de909d6aa7fa511606c7ce466a20e5761087bab0","sha512":"fa9e27cb986f10320ce13b482401a42c881c1dd7159901fe6b39a18226891a835f5aadb0ed6decf9109384aa4550b6955255a9c580668e4cfe7e9d0ffb22b4af","ssdeep":"","tlshash":"9021a75df248ab9d10b31834a42b5329607f7731f5564058914ee464283ed191153a80","size":1143,"data":"","first_seen":"2026-09-11T19:28:11.335797Z","last_seen":"2026-09-11T19:29:57.834815Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/mediaelement-core-js-before","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3268748a28d556f3cf094e854c2e589d","sha1":"23044444dc6813a6a9c312ffa59cda8b619d3492","sha256":"5acdcec37f8013f621dd3d4614c210c78999ad310afa85eb0839876c04304a26","sha512":"0001011b135f64ff898e1e2a407210d04a7a5c671bbeb3e825ceddc84300dd92ae45cafa517d6a297dbd1e695a5bc6e2e4b94fc703849e8bdaf67be583890f49","ssdeep":"","tlshash":"d761cb1ac002383b07284376bc8a47e685fdcb93d1814843a9ff4da9b2d7c386137654","size":3344,"data":"","first_seen":"2026-07-11T11:16:35.034453Z","last_seen":"2026-09-11T19:29:57.83611Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/plugins/supreme-modules-pro-for-divi/includes/modules/CardCarousel/frontend.min.js?ver=4.9.97.41","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a1e547b03127da12f23279c1af441d6","sha1":"5ca6d24031d1f3d0c3a92308c9ed5085873029b3","sha256":"9561042506851459a2f3da1f04b335760d424edc9802f4dd67083888f647b75e","sha512":"9540053be3f0aa6e87b77f121ff1a722f10f0c7b54979c792a3e4785988807353838c76a46fd62d94179008553dc69ffd0963439359208d3a7f4f454f5a4645d","ssdeep":"96:txE29yTU7Yuw3sidioTl4YyNF/GkGy+tx53cx5375cH:R9SvZrEoTaYyNF/GkGD538530","tlshash":"b4a1a9ba6610709905f358d84809eb0033f14c92c5b55970e4eea4197ede91e25ffbfd","size":5053,"data":"","first_seen":"2026-03-05T13:58:03.423828Z","last_seen":"2026-09-11T19:29:57.807763Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/et-builder-modules-script-sticky-js-extra","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"99a72adaaf20dcaeedbc0fa76e6a42ff","sha1":"a059a0fce1525c45237f0b63530b80edf8ac72d5","sha256":"ee577a6f05d705b24bea48b3cea2c7464b054fc6ce387585f0e994c662fe9815","sha512":"15369bfe9252431e52b27825cd7784276da27dfcd344bf297ece79be35ecfb1e950c8021b667109ee70ba960604e3d64e5f0b161ac3469c46a8472f932615a57","ssdeep":"","tlshash":"cd319e14e6302e365257d3f2206a5d5378fa2043cdf24888e9bc0e029fd279421c3e0e","size":1449,"data":"","first_seen":"2026-09-11T19:28:11.324678Z","last_seen":"2026-09-11T19:29:57.83695Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"8e3cb2855e5206f4ed2a039b67d1211e","sha1":"ee9585626aa0df45b21da639f82b8faaf64b1182","sha256":"5907e64edfab073cceb6cc457eb93162456093676c36f945b93743d3bf91e3a9","sha512":"65924260f31717408c224091fa113a2632cb8499430844f5d2e323bd5243302bf5da66bd245f8a1d0bf6fcf4a06dfd176fe0258b8b1ddb22b31c6f13ddd594ab","ssdeep":"","tlshash":"c370000a002080000ca28b80c202220e28c8022000023200c0020802a0c22238088ea0","size":25,"data":"","first_seen":"2023-04-11T11:24:20Z","last_seen":"2026-09-11T19:29:57.839504Z","times_seen":2885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustedsite.com/js/1.js","fqdn":"cdn.trustedsite.com","domain":"trustedsite.com","tld":"com"},"ip":{"addr":"143.204.238.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b11c2c397df221b6d141bd545b27da72","sha1":"fa0deb3a9c9b2d732066c1adfc1d90c4b215a814","sha256":"edabb49f414c54ba72e6b5aba25b55f1793239057f18e33feb35d1068ddccd5d","sha512":"1b832c3e9f66fb292e25fbeccb563e5d6180824f3f8f34be693f5791549a116e7d351e25f31600a17bf7774206cc3b4afd068f54185356622b808dabf97e0238","ssdeep":"384:JLGpnQgDMy7AzyQaQw4uSXAcx0kWAsroHyAdJ8f3onKy9bOFFgeKgLR:9GpnQmj7RQaglx0kWiHy4J8f3oRbcFg6","tlshash":"c4a294533586663de0ca34a15d3f6338f431257aea464804d3b8c275aebcd89707af6e","size":21292,"data":"","first_seen":"2025-04-17T18:18:35.281225Z","last_seen":"2026-09-11T21:03:39.860715Z","times_seen":2359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.8","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","size":1343,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-09-11T20:18:30.432333Z","times_seen":68547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.27.8","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"df0d709e41d1360d78ad68ff27da0d24","sha1":"b182a49d746fbb23a337c628fb0532f79eca1114","sha256":"99ba6db8522de562ccf84562b9f0c25da483393a9ed100bbd82c1478185f5f71","sha512":"a19676cf7f7590b25c8b5923215d1d1f75410c1bee12a03f7571aa7e9e44658dda8f95bcfe262d8616d4f8346b7ae32ee36704bfe62224a07f8c1629fdb81130","ssdeep":"3072:3ej+eZFrMyB5Jhu+hVCnQsH+SbtK/gZAcHj6PGp56S3dzRsttCxoS0+7iU5nIMCS:p8rM2hBqK/sASjog6tCxo3Q5IML5","tlshash":"6674d88cb3a5f4b162fb60a5402f770ab1766c16b40598c0e272e0f49d78d8e6163f7e","size":369288,"data":"","first_seen":"2026-08-20T07:44:00.40122Z","last_seen":"2026-09-11T20:02:15.083881Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/traffic-assets/js/tccl-tti.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c56940a864f144fae2eb40ee952cb94","sha1":"ebfc754ce962a1f9025853f2995b3987f0383d87","sha256":"3c37a4aa3cf6aaae6921a4b750c0e4f81fd338d6878be90b0faf2f921039cb23","sha512":"aef4b08a01d56bd8855653499b375db11d8fd7d67c4bcdc74323236badc47b70ddfedc14ce89828736c63ffe147bf71c14311580296d41b59f11a3305993addd","ssdeep":"384:/z+lhnKuowsx9pGxw57yty3eOHenS934osy:JioFP934Y","tlshash":"a5a2e7cdf6e0b07a13b72072903f520bf236b625180a40a4a279e9f57cb555e5227fbd","size":21592,"data":"","first_seen":"2023-10-20T03:52:57Z","last_seen":"2026-09-11T20:34:15.219777Z","times_seen":43953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://cr-digitaldefence.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.112Z","timestamp":1789154959112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cr-digitaldefence.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 18:08:24 GMT\r\nexpires: Sat, 11 Sep 2027 18:08:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 4855\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38567,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-11T21:27:13.35119Z","times_seen":559813,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":38,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.115Z","timestamp":1789154959115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cr-digitaldefence.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 18:08:24 GMT\r\nexpires: Sat, 11 Sep 2027 18:08:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 4855\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38567,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-11T21:27:13.35119Z","times_seen":559813,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/readmore.css?ver=4.9.97.41","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.837Z","timestamp":1789154958837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/public/css/readmore.css?ver=4.9.97.41 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"69783a1a-6bd\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Tue, 27 Jan 2026 04:07:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/plugins/supreme-modules-pro-for-divi/public/css/readmore.css?ver=4.9.97.41\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 6583cb15241ea46c4a7c4c5925679a70\r\nx-gateway-skip-cache: 0\r\nage: 792762\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a399149ca9f05fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1725,"size_decoded":1188,"mime_type":"text/css","magic":"ASCII text","md5":"bbd61e5da0b9dd8b9718dd37a9582c3f","sha1":"cff350a63740a5a5eb17958f451c81b80b28aa1e","sha256":"009e58f3632270c3fa8d127a9e132807a0920ac00512a2a0c5f3e8d5d728d373","sha512":"3e52975ac4da3e0762b5d79b6aa4ef8148a3e3dce36e27aae16cd810e2d53fe3d7dbb3b6cc3eef1d0350720fd5f6f2dd5536a1e58ec5cb68f063316224feb354","ssdeep":"","tlshash":"0b31ff31f12b19807237dc6c33aba7da6b2b004341c9c41e7783ee688f9e58855d1b16","first_seen":"2023-09-13T08:36:27Z","last_seen":"2026-09-11T19:29:57.742153Z","times_seen":3056,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/dsm-easy-tb.css?ver=4.9.97.41","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.838Z","timestamp":1789154958838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/public/css/dsm-easy-tb.css?ver=4.9.97.41 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"69783a1a-15a4\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Tue, 27 Jan 2026 04:07:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/plugins/supreme-modules-pro-for-divi/public/css/dsm-easy-tb.css?ver=4.9.97.41\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 0810fec160a59e3159820ffd01ac07dd\r\nx-gateway-skip-cache: 0\r\npriority: u=2,i=?0\r\nage: 29051\r\ncf-cache-status: HIT\r\ncf-ray: a399149ca9f15fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5540,"size_decoded":1419,"mime_type":"text/css","magic":"ASCII text, with very long lines (5540), with no line terminators","md5":"a30bf889fdf60412179baa67c2bc0f8b","sha1":"d0b43f580c8d0900ee5385e3b1a56c6a93975f26","sha256":"cc97086e9b213757d9faf2312ff2920e4b2e9ab7a42975f0078fd422434d9f8a","sha512":"2a122573f36a8a30d69257df621ea89ebe77bfa5061efeed7caf7f30854d1cb65ca8086f758965c310fa8e23af07c3a40b3c8e9f001b56858799f3869129d3fc","ssdeep":"48:GKo5KFKAXeFZSl8FqbitR6YUEgTg8KLKr/KElVYQLgZ:hXINEBKE/YQL2","tlshash":"d9b17eba67607d086436c99dc0d3afc0c83d8042ebe9196bd44f197f92ca675d1b3c5a","first_seen":"2023-06-20T09:43:23Z","last_seen":"2026-09-11T19:29:57.756582Z","times_seen":493,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustedsite.com/js/1.js","fqdn":"cdn.trustedsite.com","domain":"trustedsite.com","tld":"com"},"ip":{"addr":"143.204.238.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.846Z","timestamp":1789154958846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.trustedsite.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Wed, 03 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"40:1F:3F:A2:C9:51:2F:BF:1D:95:D5:68:36:E1:F4:88:5C:D6:4F:4D","sha256":"48:FD:12:4B:8C:45:16:33:2D:5B:D1:D3:EF:3A:BC:D3:2E:DD:4C:4F:4B:8E:23:A5:4D:6D:14:A2:69:11:78:A0"}}},"request":{"raw":"GET /js/1.js HTTP/1.1\r\nHost: cdn.trustedsite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 5018\r\ndate: Fri, 11 Sep 2026 18:34:37 GMT\r\ncontent-encoding: gzip\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nexpires: Fri, 11 Sep 2026 19:34:37 GMT\r\ncache-control: public, max-age=3600, s-maxage=3600, stale-while-revalidate=86400, stale-if-error=86400\r\naccess-control-allow-origin: *\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: cRDUVbfqQsIv2ERysdIOhF8IDrUtA3AMGudJzsjk2cI3TSrt43n6mA==\r\nage: 3281\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21292,"size_decoded":5728,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (633)","md5":"b11c2c397df221b6d141bd545b27da72","sha1":"fa0deb3a9c9b2d732066c1adfc1d90c4b215a814","sha256":"edabb49f414c54ba72e6b5aba25b55f1793239057f18e33feb35d1068ddccd5d","sha512":"1b832c3e9f66fb292e25fbeccb563e5d6180824f3f8f34be693f5791549a116e7d351e25f31600a17bf7774206cc3b4afd068f54185356622b808dabf97e0238","ssdeep":"384:JLGpnQgDMy7AzyQaQw4uSXAcx0kWAsroHyAdJ8f3onKy9bOFFgeKgLR:9GpnQmj7RQaglx0kWiHy4J8f3oRbcFg6","tlshash":"c4a294533586663de0ca34a15d3f6338f431257aea464804d3b8c275aebcd89707af6e","first_seen":"2025-04-17T18:18:35.281225Z","last_seen":"2026-09-11T21:03:39.860715Z","times_seen":2359,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":13,"connect":8,"send":0,"wait":11,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=7.0.4","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.854Z","timestamp":1789154958854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=7.0.4 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6a7c9293-4a7\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Wed, 12 Aug 2026 15:34:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=7.0.4\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 5bfea3c3acfc999fa29a14f1c1d6d6a5\r\nx-gateway-skip-cache: 0\r\npriority: u=3,i=?0\r\nage: 19416\r\ncf-cache-status: HIT\r\ncf-ray: a399149caa1b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1191,"size_decoded":1156,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1191), with no line terminators","md5":"51300497928562f8c86c7aaba99237cd","sha1":"e5826832b85c6afc6502b74cbb8ac5394b04c363","sha256":"6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f","sha512":"04bfdf1a41712238902bc6a0e07efaf356217e98560c52fa5d175c29191617c35853382ce2f69966bdd5e1b40114b872d962a5fad26a9e0b7d4fc016a6dcb833","ssdeep":"","tlshash":"c72121daa848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-09-11T21:25:35.626552Z","times_seen":58807,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-us-west-2.amazonaws.com/mfesecure-public/host/cr-digitaldefence.com/client.json?source=jsmain","fqdn":"s3-us-west-2.amazonaws.com","domain":"s3-us-west-2.amazonaws.com","tld":""},"ip":{"addr":"52.92.191.24","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.289Z","timestamp":1789154959289,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F8:A8:05:2C:6A:4D:1B:65:BB:E8:A2:51:59:D0:59:B8:41:84:CB:1E","sha256":"02:A5:70:13:85:29:96:D8:DB:48:40:13:C1:FC:73:3A:17:F2:35:58:E7:05:F5:96:C7:DE:D1:96:FE:E0:F7:65"}}},"request":{"raw":"GET /mfesecure-public/host/cr-digitaldefence.com/client.json?source=jsmain HTTP/1.1\r\nHost: s3-us-west-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://cr-digitaldefence.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 4j/Yf9Reyq6CvqAIlvag7vgvg5ZgdbTC+kY/WQjf7EraB2y81aXV35pYNpCj22KVM4cTcqJ+NRY=\r\nx-amz-request-id: QAXMMG3CXWGPDXQ2\r\nDate: Fri, 11 Sep 2026 19:29:25 GMT\r\nAccess-Control-Allow-Origin: https://cr-digitaldefence.com\r\nAccess-Control-Allow-Methods: GET, HEAD\r\nAccess-Control-Expose-Headers: Access-Control-Allow-Origin\r\nAccess-Control-Max-Age: 60\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Fri, 24 Jul 2026 14:08:35 GMT\r\nETag: \"9bed5bc658c0480b02f2ab1ce32a19ff\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public, max-age=60\r\nContent-Encoding: gzip\r\nx-amz-version-id: 8uw4cnfy5hyHoM.OVZLkZkTAXjPIV8t6\r\nAccept-Ranges: bytes\r\nContent-Type: application/json\r\nContent-Length: 174\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":1029,"mime_type":"application/json","magic":"JSON text data","md5":"8c36d1d5b86aa2ccd8ad2473337d9836","sha1":"ffa5dafc497d47f10cef21f873ec9bc5f4dd1e78","sha256":"90330414f4108fc0f0e87ca630707d7c995da3a9851dfed6c234ea98b9440fb8","sha512":"2b4b67ca193be96a92368702de3afafa17d386d4dbb51e54850bde393f65c767388237ab12a70b02954529f796dfab7a4296a054982b95cfe02dfcd416ffe0dd","ssdeep":"","tlshash":"e9d022025e548622d261f297a0caa98184bc82224c25cb2c84a44b1c879936b13838e7","first_seen":"2026-09-11T19:28:11.287736Z","last_seen":"2026-09-11T19:29:57.760297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4954,"timings":{"blocked":-1,"dns":20,"connect":177,"send":0,"wait":211,"receive":0,"ssl":4546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.698Z","timestamp":1789154959698,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3 HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://cr-digitaldefence.com/\r\nContent-Length: 1266\r\nOrigin: https://cr-digitaldefence.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1266,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"66e54fcda6c3418c9e093c0528a13044\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.3\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"66e54fcda6c3418c9e093c0528a13044\",\"host\":\"cr-digitaldefence.com\",\"path\":\"/\",\"location\":\"https://cr-digitaldefence.com/\",\"referrer\":\"\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"5f95e6f0-e4a5-462b-bb12-7e56ba3fea25\",\"sessionId\":\"5f95e6f0-e4a5-462b-bb12-7e56ba3fea25\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/data-platform/signals/page-view/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-09-11T19:29:19.350Z\",\"forensics\":{\"traceIdAdopted\":false},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"wpaas_v2\",\"server\":\"6a1a9ffcb14e\",\"pod\":\"c11-prod-sxb1-eu-central-1\",\"xid\":\"46299176\",\"wp\":\"7.0.4\",\"php\":\"8.2.33\",\"loggedin\":\"0\",\"cdn\":\"1\",\"builder\":\"divi\",\"theme\":\"divi\",\"wds\":\"0\",\"wp_alloptions_count\":\"239\",\"wp_alloptions_bytes\":\"102084\",\"gdl_coming_soon_page\":\"0\",\"appid\":\"1227704\"},\"customProperties\":{}},\"producerEventId\":\"a0d49fe8-725a-47ca-8c5d-b21bb4ce2de0\"}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 221330393112751180160469697352236089502\r\nx-envoy-upstream-service-time: 80\r\nx-error-info: 0\r\nx-request-id: ead2264f-b567-4e59-ba02-497e556a738b\r\nExpires: Fri, 11 Sep 2026 19:29:19 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Fri, 11 Sep 2026 19:29:19 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":508,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-09-11T21:25:18.022166Z","times_seen":774601,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":174,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ywxi.net/meter/cr-digitaldefence.com/205.svg?ts=1784902114179\u0026l=en","fqdn":"cdn.ywxi.net","domain":"ywxi.net","tld":"net"},"ip":{"addr":"143.204.238.60","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:24.296Z","timestamp":1789154964296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ywxi.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Jul 2026 00:00:00 GMT","end":"Wed, 03 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1E:90:F7:00:48:7D:31:D6:49:BA:2C:71:37:5E:57:3D:6B:21:47:75","sha256":"C9:45:90:3D:A7:D7:F6:3C:F0:09:E1:A9:C7:F4:DA:BE:B7:2C:C3:5A:C8:26:C4:22:32:63:6D:73:06:9A:DE:16"}}},"request":{"raw":"GET /meter/cr-digitaldefence.com/205.svg?ts=1784902114179\u0026l=en HTTP/1.1\r\nHost: cdn.ywxi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 7400\r\ndate: Fri, 11 Sep 2026 19:27:32 GMT\r\ncontent-encoding: gzip\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public\r\nexpires: Fri, 11 Sep 2026 20:27:32 GMT\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 195f7f7651272570d2f9df923feb0f6c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: QyhSyu5sfz8HffhUCxHs6KblNPfpxaCILOpn0jjhrObw9ZbJSEX4Cg==\r\nage: 112\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20606,"size_decoded":7979,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d2915d8e6d1b1a695dec64bd15417740","sha1":"5b0c4660b470b32bb4fec4b59615d9c6a453b057","sha256":"1a0989896f2933670321396aa9d0581db5ec8bdf3327691ca35f9c4bfa98c8fd","sha512":"e1130ca2155a58fb30e6f64a95acc50234724e1834c7628eb3568b1f8ecea6c6386f35b24c052643b6340547d5dc564ebc01f12e40045babd65850d360eae7e5","ssdeep":"384:EWcJIH4saW3RVyu8mK/ch0BJTCrljxjWeEvks52:N4eRVt8EFmc+2","tlshash":"3192a680232d87b9f58463e928e108557e772dde33908158f6cfadd9ab178c505e2ce7","first_seen":"2023-04-07T11:06:26Z","last_seen":"2026-09-11T19:29:57.763295Z","times_seen":3360,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":0,"dns":40,"connect":10,"send":0,"wait":35,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/plugins/supreme-modules-pro-for-divi/styles/style.min.css?ver=4.9.97.41","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.827Z","timestamp":1789154958827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/styles/style.min.css?ver=4.9.97.41 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"69783a1a-690a9\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Tue, 27 Jan 2026 04:07:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/plugins/supreme-modules-pro-for-divi/styles/style.min.css?ver=4.9.97.41\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 37e97739eee8c2d6a0763385948430ab\r\nx-gateway-skip-cache: 0\r\npriority: u=2,i=?0\r\nage: 29052\r\ncf-cache-status: HIT\r\ncf-ray: a399149ca9e35fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430249,"size_decoded":27018,"mime_type":"text/css","magic":"ASCII text, with very long lines (35431)","md5":"8cb2b3848ed2a5840ae9ec657e75efce","sha1":"d4f01b5f07c5a4014ccc052c3bb7d3e9a2d0e016","sha256":"a926317e79ba8c00c226f7ec6c891f03e04b88c6e33382367256fb0cc15acead","sha512":"398793591a9c83109e240d57aa376a6e8cd2a08876a62c936d0ccaf2941aedde42b0c0d6adcbf626b297283022761e8a9930bf0af0c547b86139df8fd32ce370","ssdeep":"6144:Ef3fXjnikiqZjbJ7fExtOQYLyf3fXjs0qL:sjnikiFjE","tlshash":"e49423e69a6012856123cf0583cd5aa5e73cc263b5e50cefb316290f8743b9d239bb57","first_seen":"2025-09-18T16:56:35.414199Z","last_seen":"2026-09-11T19:29:57.764642Z","times_seen":1791,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/swiper.css?ver=4.9.97.41","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.832Z","timestamp":1789154958832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/public/css/swiper.css?ver=4.9.97.41 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"69783a1a-5ae3\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Tue, 27 Jan 2026 04:07:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/plugins/supreme-modules-pro-for-divi/public/css/swiper.css?ver=4.9.97.41\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 86070f7cab29b7bbd8bc20920ec21d5c\r\nx-gateway-skip-cache: 0\r\npriority: u=2,i=?0\r\nage: 29051\r\ncf-cache-status: HIT\r\ncf-ray: a399149ca9ea5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23267,"size_decoded":4035,"mime_type":"text/css","magic":"ASCII text, with very long lines (1470)","md5":"d36df5214d30657b248019fd0271214d","sha1":"052c60bd16a32e094d6fe8894b88d7a404592067","sha256":"3496dc190f1773f5eea53147fc26954322151147599b83979a271a6d2c5ddf08","sha512":"642a41f812d45483820e06657fff4ef1eeffce3def5d165caa9249411f72b2516ac6722bdd7369f94e135835794aa4e97a13a4a76231ae19071fb80f1f3cb5e4","ssdeep":"192:vwScstxtwCt32rZ9faPUt3V5H40dnWtSStY+7oyJrtYaPtYZVXuHBVtS+wjvqXAn:vu6kfNVYuf+h0IJxFOMFcsvBdZDyZ","tlshash":"52a2544c1b622803a6254e1d0beaa7349768c4834e43dcad76c1de48dfbe5b8325ff65","first_seen":"2025-11-19T22:55:43.65561Z","last_seen":"2026-09-11T19:29:57.768506Z","times_seen":882,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.27.8","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.850Z","timestamp":1789154958850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.27.8 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6a879d4f-5a288\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Fri, 21 Aug 2026 00:35:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/themes/Divi/js/scripts.min.js?ver=4.27.8\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: a35feba81e1df5518e7e75f0d25bca5d\r\nx-gateway-skip-cache: 0\r\npriority: u=3,i=?0\r\nage: 29050\r\ncf-cache-status: HIT\r\ncf-ray: a399149caa0b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":369288,"size_decoded":84024,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65467)","md5":"df0d709e41d1360d78ad68ff27da0d24","sha1":"b182a49d746fbb23a337c628fb0532f79eca1114","sha256":"99ba6db8522de562ccf84562b9f0c25da483393a9ed100bbd82c1478185f5f71","sha512":"a19676cf7f7590b25c8b5923215d1d1f75410c1bee12a03f7571aa7e9e44658dda8f95bcfe262d8616d4f8346b7ae32ee36704bfe62224a07f8c1629fdb81130","ssdeep":"3072:3ej+eZFrMyB5Jhu+hVCnQsH+SbtK/gZAcHj6PGp56S3dzRsttCxoS0+7iU5nIMCS:p8rM2hBqK/sASjog6tCxo3Q5IML5","tlshash":"6674d88cb3a5f4b162fb60a5402f770ab1766c16b40598c0e272e0f49d78d8e6163f7e","first_seen":"2026-08-20T07:44:00.40122Z","last_seen":"2026-09-11T20:02:15.083881Z","times_seen":318,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.853Z","timestamp":1789154958853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6a7c9293-26935\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Wed, 12 Aug 2026 15:34:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 1d71493414b27da67620799d228f94f5\r\nx-gateway-skip-cache: 0\r\npriority: u=3,i=?0\r\nage: 19416\r\ncf-cache-status: HIT\r\ncf-ray: a399149caa185fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158005,"size_decoded":36339,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65266)","md5":"e53ec3d6e21be78115810135f5e956fe","sha1":"523892839b88351523e0498ba881c4431197b54e","sha256":"b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f","sha512":"84b080eaaa043928f038421ceb18bba7483afee5b6480a92ee01992317cde2361a6dd255b16ec036e51e8a1fef46b5379c6a5ff5c9ec69d682f96deaa03a8842","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7","tlshash":"14f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","first_seen":"2023-03-08T14:26:25Z","last_seen":"2026-09-11T21:25:35.610804Z","times_seen":58450,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/uploads/2023/11/cr-digital-defences.png","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.250Z","timestamp":1789154959250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/cr-digital-defences.png HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 6045\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\netag: \"654218c4-3e73\"\r\nexpires: Mon, 12 Oct 2026 19:29:19 GMT\r\nlast-modified: Wed, 01 Nov 2023 09:22:12 GMT\r\nserver: cloudflare\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/uploads/2023/11/cr-digital-defences.png\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 4bbc980897a333988fd0766e3c50f0a5\r\nx-gateway-skip-cache: 0\r\nage: 792760\r\npriority: u=4,i\r\nvary: accept-encoding\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=15987\r\ncf-cache-status: HIT\r\ncf-ray: a399149f7cb55fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6045,"size_decoded":6771,"mime_type":"image/png","magic":"PNG image data, 245 x 100, 8-bit/color RGBA, non-interlaced","md5":"a927b5ed7f31812d915d64d792139315","sha1":"a2e8f593d35d106b1108d2551406c43a1267b12d","sha256":"a5c4e610a3c22351a815232f014eb35b0bba1bee8e5bf60d35e5a874dd54da8f","sha512":"a29219482eb47abc27bdfc6ac4278a653167cdfea8de7648a90601499c47696cc3f4fd96a4360c75cee49a5fe10b97106bec49ce602c74153d45981eaff26769","ssdeep":"96:MDlr7B4jVuHFZ/vlHswPCM+DmrG2wVkGu6n4/zB53/pkyqh3UPBEMUxtw:MDlSVullxswPCI1wqmkzX3/HmMR","tlshash":"2fc19fcb8cb7cc69ca56145ee831ed093e574633338e530cd4d419eeb065c95ae1af94","first_seen":"2026-09-11T19:28:11.281583Z","last_seen":"2026-09-11T19:29:57.771586Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800\u0026subset=latin,latin-ext\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.823Z","timestamp":1789154958823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800\u0026subset=latin,latin-ext\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 11 Sep 2026 19:29:18 GMT\r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60285,"size_decoded":3065,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"5e5b4b2e4d78154ea73b0609805cc2d5","sha1":"ceeed0d32187afdc105bd721bfbd69673a1d371e","sha256":"831b4f88e3e23e5cee5dae66d5ad1b348bd4a5dd9ecfa1d88c40938751b6f909","sha512":"a8c2cfd51edb65116da470fe1a8486154f8f9f1e09d42886633d3a92b24d4d815bb1f6111aaebc174d46dc63aca916ac8b3726925cdeb1398166d90fbfc1fc41","ssdeep":"384:+oOcL9tMTv9qY49OnL6dOhqqt5Iv0qY49HnQdXO/UQtXWvyqY49tnyTUOYnht4v2:wdBIM84eKcZd4oIp+6hFzFCuVh","tlshash":"d043fb9104171440aa435dd233de7e34ee0fa6616044c0baabfd9bdbeecad6963b435c","first_seen":"2025-09-17T04:42:01.875528Z","last_seen":"2026-09-11T20:59:37.842485Z","times_seen":19370,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":34,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/animate.css?ver=4.9.97.41","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.835Z","timestamp":1789154958835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/public/css/animate.css?ver=4.9.97.41 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"69783a1a-14d7b\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Tue, 27 Jan 2026 04:07:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/plugins/supreme-modules-pro-for-divi/public/css/animate.css?ver=4.9.97.41\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: aff4212bc3ece0e0a57d28564afea28a\r\nx-gateway-skip-cache: 0\r\npriority: u=2,i=?0\r\nage: 29051\r\ncf-cache-status: HIT\r\ncf-ray: a399149ca9ee5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85371,"size_decoded":5066,"mime_type":"text/css","magic":"ASCII text","md5":"f733d0fb45713b13b3ef2e60abf101ba","sha1":"abc1c8bf1d48d261bf40ad9e86598b684a18a49c","sha256":"2414767fbf3e93d3269cb3795b6c667da0f58a8f662dfd8aabb0807243d1134f","sha512":"61e8e6c9a036e566a6060613aafd8891f41c2570f3fadb8b744772dd559c85e9103fa6f12f8d56f5e547f35e95728684bc297a764088e5b7a757886077a76ed4","ssdeep":"384:BHLeieV9+Y5e5eH1f1zFuFS+R+tK4RAcsTs+g:xLeieqY5e5eF+R+tK4RAcsTs+g","tlshash":"278331ad29d2108456638a1d83df4e68163ce1731816acee738e598fcf8bf6c57c9247","first_seen":"2023-04-07T08:44:48Z","last_seen":"2026-09-11T20:00:21.752101Z","times_seen":7422,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.847Z","timestamp":1789154958847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6a7c8d74-15601\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Wed, 12 Aug 2026 15:12:52 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-includes/js/jquery/jquery.min.js?ver=3.7.1\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 25f7e3da92922d5b6c678d8d08b1b57d\r\nx-gateway-skip-cache: 0\r\nage: 792762\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a399149caa055fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":30257,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-11T21:25:35.620017Z","times_seen":1054120,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/plugins/supreme-modules-pro-for-divi/public/js/dsm-easy-tb.js?ver=4.9.97.41","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.852Z","timestamp":1789154958852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/public/js/dsm-easy-tb.js?ver=4.9.97.41 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"69783a1a-14d1\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Tue, 27 Jan 2026 04:07:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/plugins/supreme-modules-pro-for-divi/public/js/dsm-easy-tb.js?ver=4.9.97.41\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 4788ad05a1da58eb22c7fb13645d0a94\r\nx-gateway-skip-cache: 0\r\npriority: u=3,i=?0\r\nage: 559276\r\ncf-cache-status: HIT\r\ncf-ray: a399149caa135fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5329,"size_decoded":1548,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5329), with no line terminators","md5":"1101961f65d69ee20dfa7ef944b50781","sha1":"c05fab44263894b4b2eec0bc1320a901635ee3cf","sha256":"913b0b034d2f5638882559dd5ffc399a05d47534939de8c6ab24dd0cb3fadabe","sha512":"a3d2bb9b72f971468047a02a06d7ad11861dc049d040c3063cd974de3f1ec41ba16f4ec4227d60b9e09bde26b908214f393efcfee2ceaa8f5da9eff56128772c","ssdeep":"96:0gCT+To/NlFtX7/ulPP5qGS+z1qG+++Rs:A/u35dDv","tlshash":"78b1293fd775b918783c8cacd0469e58da3d080a9fe91ea3d068a43e42cde76a1d644d","first_seen":"2023-03-08T03:40:58Z","last_seen":"2026-09-11T19:29:57.778044Z","times_seen":494,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.270Z","timestamp":1789154959270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /signals/js/clients/scc-c2/scc-c2.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: q2EmTrhcC/PR9ZLIQKGH0iUd6tWlVNuMsPE9UPdtkhXyNjFgPPeccEWqYr/vb0waF7iIWheUYAU=\r\nx-amz-request-id: 1AKBMQAYEGPWCKD5\r\nlast-modified: Tue, 25 Aug 2026 19:45:10 GMT\r\netag: \"56ad8d8cdac1d0e48cbb1ecefc4e10b6\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-version: 1.3.3\r\nx-amz-version-id: MeEMI4pY1a0nmUjyvETUbje9mL.IsLTY\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=1800\r\nexpires: Fri, 11 Sep 2026 19:59:19 GMT\r\ndate: Fri, 11 Sep 2026 19:29:19 GMT\r\ncontent-length: 21697\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":106613,"size_decoded":22348,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"56ad8d8cdac1d0e48cbb1ecefc4e10b6","sha1":"82a17170f875858e419c6ca81f71f8cea9b619f7","sha256":"21f2f0620476936458d35bff8503ca60c9a9b7a163e9837d68f8e8221839fbaf","sha512":"781c99aad69e3b77a3618d8e7f8b80cce44390b1bbf659d469c04ff7e872df82c4b9c0bc4883b596ee30b10ba97adb43ad11aa96679dd82024fd075b03623734","ssdeep":"1536:azZq1lDuiRGSW/3TV4vlV7mDHaQfzOIDz2Gi9:eCPW/8lj","tlshash":"77a3a788f6a1f07142e76165413f010bf279a966b0aed0d4e725e8f4adf85ce8173f29","first_seen":"2026-08-25T19:47:01.786054Z","last_seen":"2026-09-11T20:59:34.374864Z","times_seen":1646,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-us-west-2.amazonaws.com/mfesecure-public/host/cr-digitaldefence.com/client.json?source=jsinline","fqdn":"s3-us-west-2.amazonaws.com","domain":"s3-us-west-2.amazonaws.com","tld":""},"ip":{"addr":"52.92.191.24","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.291Z","timestamp":1789154959291,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F8:A8:05:2C:6A:4D:1B:65:BB:E8:A2:51:59:D0:59:B8:41:84:CB:1E","sha256":"02:A5:70:13:85:29:96:D8:DB:48:40:13:C1:FC:73:3A:17:F2:35:58:E7:05:F5:96:C7:DE:D1:96:FE:E0:F7:65"}}},"request":{"raw":"GET /mfesecure-public/host/cr-digitaldefence.com/client.json?source=jsinline HTTP/1.1\r\nHost: s3-us-west-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://cr-digitaldefence.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: iXiZdRrvbJoNApqDcfLdReHyEnfnEIdRreBq+U3N+2QrF2vYYSBze7KV+yhAtyc67DM+zNZLZVI=\r\nx-amz-request-id: V15TWK4NPKQJCRZC\r\nDate: Fri, 11 Sep 2026 19:29:26 GMT\r\nAccess-Control-Allow-Origin: https://cr-digitaldefence.com\r\nAccess-Control-Allow-Methods: GET, HEAD\r\nAccess-Control-Expose-Headers: Access-Control-Allow-Origin\r\nAccess-Control-Max-Age: 60\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Fri, 24 Jul 2026 14:08:35 GMT\r\nETag: \"9bed5bc658c0480b02f2ab1ce32a19ff\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public, max-age=60\r\nContent-Encoding: gzip\r\nx-amz-version-id: 8uw4cnfy5hyHoM.OVZLkZkTAXjPIV8t6\r\nAccept-Ranges: bytes\r\nContent-Type: application/json\r\nContent-Length: 174\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":1029,"mime_type":"application/json","magic":"JSON text data","md5":"8c36d1d5b86aa2ccd8ad2473337d9836","sha1":"ffa5dafc497d47f10cef21f873ec9bc5f4dd1e78","sha256":"90330414f4108fc0f0e87ca630707d7c995da3a9851dfed6c234ea98b9440fb8","sha512":"2b4b67ca193be96a92368702de3afafa17d386d4dbb51e54850bde393f65c767388237ab12a70b02954529f796dfab7a4296a054982b95cfe02dfcd416ffe0dd","ssdeep":"","tlshash":"e9d022025e548622d261f297a0caa98184bc82224c25cb2c84a44b1c879936b13838e7","first_seen":"2026-09-11T19:28:11.287736Z","last_seen":"2026-09-11T19:29:57.760297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5890,"timings":{"blocked":-1,"dns":19,"connect":178,"send":0,"wait":201,"receive":0,"ssl":5491},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/uploads/2024/03/website-hero.mp4","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.344Z","timestamp":1789154959344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/website-hero.mp4 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Fri, 11 Sep 2026 19:29:19 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 9027595\r\nage: 19416\r\ncache-control: public, max-age=2678400\r\netag: \"6602a69d-89c00b\"\r\nexpires: Mon, 12 Oct 2026 19:29:19 GMT\r\nlast-modified: Tue, 26 Mar 2024 10:42:37 GMT\r\nserver: cloudflare\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/uploads/2024/03/website-hero.mp4\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 99f85ab2b6b8304da24d7a453d2a4f23\r\nx-gateway-skip-cache: 0\r\npriority: u=4,i=?0\r\ncontent-range: bytes 0-9027594/9027595\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a399149fed1a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9027595,"size_decoded":9028281,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"dfb0146224e01a59a32e0ecc6d6d0388","sha1":"6f44b23ecb6cd80b0d3e15b82b0df7d8c45c0442","sha256":"ab2003ca99698e3450b93acf480a7e5774b5e92db5b98316481f8383acef53fc","sha512":"d34667c39cf66bdf08a8be2e6a818416b3e7b530f5722c00a63e616b0f6f8699b742f919e7a948698fbc7a74fac935628328e63931c2b74b1299efdccf4dc2d1","ssdeep":"24576:Y1Y1w17UBYBF9qryvzPaekp25/wZbxR6Qbqp8:Yew74yqryvTnkpi/kbxAa","tlshash":"372523ad8e414900f748f87d2841dd6ae6e092c3cde3ea2b704e05643b752e51b6f67b","first_seen":"2026-09-11T19:28:11.277531Z","last_seen":"2026-09-11T19:29:57.781604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=7.0.4","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.843Z","timestamp":1789154958843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=7.0.4 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6a7c8d75-105a\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Wed, 12 Aug 2026 15:12:53 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=7.0.4\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: b59fa2557f10c8849ec0c4483e24b0c3\r\nx-gateway-skip-cache: 0\r\npriority: u=2,i=?0\r\nage: 792743\r\ncf-cache-status: HIT\r\ncf-ray: a399149ca9ff5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4186,"size_decoded":1641,"mime_type":"text/css","magic":"ASCII text, with very long lines (4186), with no line terminators","md5":"ea958276b7de454bd3c2873f0dc47e5f","sha1":"b143f6e8e8f79d8f104c26b0057ef5514d763219","sha256":"2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe","sha512":"2d40a1e713355eff88fa3bbf5471b4db5acc48fa2b978a555c034f2e5c7f131fcaf48e849d5d048df9d5dae068c4b6467a97b1dde99115e6b32f57e928569fc1","ssdeep":"48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U","tlshash":"d9810c1084149d2cf4eab33766cec75db43ad747fe75e7b86936e2b8c098a842073484","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-09-11T21:25:35.606995Z","times_seen":95069,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/uploads/2023/11/bitcoin.png","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.845Z","timestamp":1789154958845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/bitcoin.png HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 323157\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\netag: \"65422c67-745e3\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Wed, 01 Nov 2023 10:45:59 GMT\r\nserver: cloudflare\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/uploads/2023/11/bitcoin.png\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: d324bea71b5a4bcb7afe98a68caedb17\r\nx-gateway-skip-cache: 0\r\nvary: accept-encoding\r\ncf-polished: ok, orig_size=476643\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nage: 19416\r\ncf-cache-status: HIT\r\ncf-ray: a399149caa035fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":323157,"size_decoded":323874,"mime_type":"image/png","magic":"PNG image data, 687 x 687, 8-bit/color RGBA, non-interlaced","md5":"02be67a22d240fb7e62415c786ac3f9d","sha1":"b6ad2e6892e4ed51c88360955493a54d6ba8df82","sha256":"7f0a5c547f84cf052140644beacd555fbc96c7330074af0009edb26c981ceb0c","sha512":"a34d00130b308ee3041e1816b0ade0e70c6a79aa2f71db240aea91ab2563f09309248f473c457c035450cf0325bb03b5182ebf4e0d73aa1758280277e80e405a","ssdeep":"6144:MaV2rSMplcLbxKhA051CkWIoxnSWs0Rk3lK/F3sfDEQEDWnpgHVYH3:WSvxK95S9JSWsP3A/qDEQPpg1YH3","tlshash":"816423e3f87032642642b6ed7dd7a20e5852eae73d2340285f8a5d84b17992c723c5bd","first_seen":"2026-09-11T19:28:11.309177Z","last_seen":"2026-09-11T19:29:57.795563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.107Z","timestamp":1789154959107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cr-digitaldefence.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:22 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 205077\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-11T21:27:30.144782Z","times_seen":340389,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":29,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.108Z","timestamp":1789154959108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cr-digitaldefence.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 18:08:24 GMT\r\nexpires: Sat, 11 Sep 2027 18:08:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 4855\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38567,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-11T21:27:13.35119Z","times_seen":559813,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":50,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/themes/Divi/core/admin/fonts/fontawesome/fa-solid-900.woff2","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.110Z","timestamp":1789154959110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/fonts/fontawesome/fa-solid-900.woff2 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 80300\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\netag: \"6a879d4e-139ac\"\r\nexpires: Mon, 12 Oct 2026 19:29:19 GMT\r\nlast-modified: Fri, 21 Aug 2026 00:35:26 GMT\r\nserver: cloudflare\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/themes/Divi/core/admin/fonts/fontawesome/fa-solid-900.woff2\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: cb6e64cc67c3b9d1eb5183ec3a073023\r\nx-gateway-skip-cache: 0\r\npriority: u=3,i=?0\r\nage: 19413\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a399149e6b725fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80300,"size_decoded":81075,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 80300, version 331.-31392","md5":"8e1ed89b6ccb8ce41faf5cb672677105","sha1":"9b592048b9062b00f0b2dd782d70a95b7dc69b83","sha256":"6b555920e358f8a25a422988b448615c33bcccb4f932e8331cebfc8e2a737fc7","sha512":"e2f6b4574cb1541dff6852d0af44faae80286110e8451841eade4b53ebdf31150602640fe1bdfff41459ea4ae884d14d115fbc93b30d199c87b88f5d07e4cd72","ssdeep":"1536:Tek2SzK4WGTQH1GlyGLj3SUwtyIWeOo4XyydPl2mN4fsxDFsbaLsND1Vv08:ak2gTQVGLL7IyDelE7dPZ35FeND19","tlshash":"d3730272fd7b05541fe8e3ad39390568bb881acc35c949f2058afc95e0ab67a7684d03","first_seen":"2023-04-05T05:13:35Z","last_seen":"2026-09-11T20:00:21.775816Z","times_seen":31642,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.700Z","timestamp":1789154959700,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://cr-digitaldefence.com/\r\nContent-Length: 2069\r\nOrigin: https://cr-digitaldefence.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2069,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"66e54fcda6c3418c9e093c0528a13044\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.3\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"66e54fcda6c3418c9e093c0528a13044\",\"host\":\"cr-digitaldefence.com\",\"path\":\"/\",\"location\":\"https://cr-digitaldefence.com/\",\"referrer\":\"\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"5f95e6f0-e4a5-462b-bb12-7e56ba3fea25\",\"sessionId\":\"5f95e6f0-e4a5-462b-bb12-7e56ba3fea25\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/rigor/page-navigation/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-09-11T19:29:19.488Z\",\"navigationType\":\"navigate\",\"timing\":{\"navigation\":{\"connectEnd\":1789154958413,\"connectStart\":1789154958394,\"domComplete\":1789154959440,\"domContentLoadedEventEnd\":1789154959180,\"domContentLoadedEventStart\":1789154959174,\"domInteractive\":1789154959172,\"domLoading\":1789154958549,\"domainLookupEnd\":1789154958394,\"domainLookupStart\":1789154958391,\"fetchStart\":1789154958381,\"navigationStart\":1789154958362,\"requestStart\":1789154958413,\"responseEnd\":1789154958445,\"responseStart\":1789154958444,\"loadEventStart\":1789154959440,\"loadEventEnd\":0,\"pageLoadTime\":1078,\"domContentLoadedTime\":812,\"domInteractiveTime\":810,\"pageDownloadTime\":1,\"domainLookupTime\":3,\"serverResponseTime\":31,\"serverConnectionTime\":19,\"redirectionTime\":19},\"paint\":{\"largestContentfulPaint\":990}},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"wpaas_v2\",\"server\":\"6a1a9ffcb14e\",\"pod\":\"c11-prod-sxb1-eu-central-1\",\"xid\":\"46299176\",\"wp\":\"7.0.4\",\"php\":\"8.2.33\",\"loggedin\":\"0\",\"cdn\":\"1\",\"builder\":\"divi\",\"theme\":\"divi\",\"wds\":\"0\",\"wp_alloptions_count\":\"239\",\"wp_alloptions_bytes\":\"102084\",\"gdl_coming_soon_page\":\"0\",\"appid\":\"1227704\"}},\"producerEventId\":\"54bac4be-46bc-4aba-a667-d7be1ce3dca0\",\"contentLoadType\":\"hard\",\"response\":{\"transferSize\":28234,\"encodedBodySize\":27934,\"decodedBodySize\":161121}}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 229031807293863389565310680555957414250\r\nx-envoy-upstream-service-time: 80\r\nx-error-info: 0\r\nx-request-id: 0cec928e-7099-48ad-9707-e357fc325a95\r\nExpires: Fri, 11 Sep 2026 19:29:20 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Fri, 11 Sep 2026 19:29:20 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":508,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-09-11T21:25:18.022166Z","times_seen":774601,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":174,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/uploads/2023/11/cropped-favicon-192x192.png","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.735Z","timestamp":1789154959735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/cropped-favicon-192x192.png HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP; _tccl_visitor=5f95e6f0-e4a5-462b-bb12-7e56ba3fea25; _tccl_visit=5f95e6f0-e4a5-462b-bb12-7e56ba3fea25; _scc_session=pc=1\u0026C_TOUCH=2026-09-11T19:29:19.350Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 10135\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\netag: \"6542180e-3305\"\r\nexpires: Mon, 12 Oct 2026 19:29:19 GMT\r\nlast-modified: Wed, 01 Nov 2023 09:19:10 GMT\r\nserver: cloudflare\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/uploads/2023/11/cropped-favicon-192x192.png\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 2c243000543a91a0209a126a447d543a\r\nx-gateway-skip-cache: 0\r\npriority: u=4,i=?0\r\ncf-polished: ok, orig_size=13061\r\nvary: accept-encoding\r\ncf-bgj: h2pri,imgq:100\r\nage: 19411\r\ncf-cache-status: HIT\r\ncf-ray: a39914a258165fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10135,"size_decoded":10868,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"c3ddfe2c717d8c0eda10970b3bcff6c5","sha1":"a21adba83d6655acda13013671f8060cfaaf8e13","sha256":"69ccef2352dfc688fbdc935cb4f05e5c905db32c3da321e5af5fe96f31e62bb6","sha512":"6a6fd6246691ef01a0d7ac53b633946caf80f349a349a9323275ac7e633d57d514ece95dd119008e4ee9d5816b8f9493e5a611104e2e79be3b865c60b4b16adb","ssdeep":"192:FBnnnXdC3DvVUYAMx6YP6ky6xfJzjut+/sUUSIldYIkM8mDLKSZMcuGrbYjjLW:DdqzVlAO6YPHyu581PNYIymD844P6","tlshash":"af22c0a5e50469524b952234e2c171929e9e8fd0384f03b7dcf6b7701e32e0a1f1594f","first_seen":"2026-09-11T19:28:11.298535Z","last_seen":"2026-09-11T19:29:57.798856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/mu-plugins/vendor/wpex/godaddy-launch/includes/Dependencies/GoDaddy/Styles/build/latest.css?ver=2.0.2","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.639Z","timestamp":1789154958639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/mu-plugins/vendor/wpex/godaddy-launch/includes/Dependencies/GoDaddy/Styles/build/latest.css?ver=2.0.2 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6aa084f2-3256\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Tue, 08 Sep 2026 21:58:10 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/mu-plugins/vendor/wpex/godaddy-launch/includes/Dependencies/GoDaddy/Styles/build/latest.css?ver=2.0.2\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 026db21acf0bac35c2b49d6b3bab69fd\r\nx-gateway-skip-cache: 0\r\npriority: u=2,i=?0\r\nage: 29052\r\ncf-cache-status: HIT\r\ncf-ray: a399149b78be5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12886,"size_decoded":2025,"mime_type":"text/css","magic":"ASCII text, with very long lines (12885)","md5":"0793ca35f5d388181a5e6c01688af110","sha1":"497222a5f1c49dac626016019ca769ac1e3e39dc","sha256":"470b8fe4451dab1ff2c7edeeb3091a932188b7acaa06d7e7187f9dd90947a553","sha512":"928c9376d7387ed5b7c4e8f8d65eda6be43436911e7fbbcbcaf936f6a9720bd6063c7f3d207031906f91bfc8226b099cffbe39bed3db77c510b43771550475f2","ssdeep":"96:8rT0JWgQnOiPvdLtjZv/6s6U6spjOHOtO7O2zPFj0eS2BC+yWOoQgwxzAWTD2IHK:SvOoMjrVpqxzAWTD24C+AG0F","tlshash":"4d42c7f648595d3822cba34663bfbd17084d01e8d9f39dd6b93284e646ca31e089749f","first_seen":"2023-04-06T20:32:44Z","last_seen":"2026-09-11T19:29:57.799933Z","times_seen":5929,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/et-cache/10/et-divi-dynamic-10.css?ver=1787359766","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.826Z","timestamp":1789154958826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/et-cache/10/et-divi-dynamic-10.css?ver=1787359766 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6a88f216-e705\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Sat, 22 Aug 2026 00:49:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/et-cache/10/et-divi-dynamic-10.css?ver=1787359766\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 9963b6d79c8a2296a550cfb3fe1fb7dd\r\nx-gateway-skip-cache: 0\r\npriority: u=0,i=?0\r\nage: 19418\r\ncf-cache-status: HIT\r\ncf-ray: a399149ca9e15fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59141,"size_decoded":5188,"mime_type":"text/css","magic":"ASCII text, with very long lines (39491)","md5":"e7c7baec0b2943e9e5ac0939643f1923","sha1":"81938f1d6140a66444c66fd96264153fc8675f39","sha256":"05b809fa3e19ee2b4e20c43229828099dd93bad016c135260126069c0d64e732","sha512":"a8446c9cd9d1101fb90dc537cd6f34b28eb92e8606ebaf73f9b205aa1c0ab57b47f3d1d8b13290ffcb2eecb27b26cf369400918e9b524cfdf9005e83d7cde14a","ssdeep":"192:WBa+TF1DB4kNmIBiclnMOftC6XbODg9TtoU4wPhG6uZi34TiLtmiT1+se0JieiCz:Oa+Tz31/","tlshash":"ff432c0f9b7d36f072835ff5ad8ae3d0d254e6836ad314497aa0c50a6b832decc6215d","first_seen":"2025-06-16T09:39:29.887695Z","last_seen":"2026-09-11T19:29:57.800575Z","times_seen":14,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.8","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.850Z","timestamp":1789154958850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.8 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6a879d4e-53f\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Fri, 21 Aug 2026 00:35:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.8\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 6bb767ad869451861af5cefb50a88daf\r\nx-gateway-skip-cache: 0\r\npriority: u=3,i=?0\r\nage: 29050\r\ncf-cache-status: HIT\r\ncf-ray: a399149caa115fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1343,"size_decoded":1160,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-09-11T20:18:30.432333Z","times_seen":68547,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=7.0.4","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.855Z","timestamp":1789154958855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=7.0.4 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6a7c9293-453\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Wed, 12 Aug 2026 15:34:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=7.0.4\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 9fbda8c32222b849ad8a3285846859e8\r\nx-gateway-skip-cache: 0\r\npriority: u=3,i=?0\r\nage: 19416\r\ncf-cache-status: HIT\r\ncf-ray: a399149caa1d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1107,"size_decoded":1126,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1107), with no line terminators","md5":"8a5c9689ae636c452b6808740ba04136","sha1":"8d2c85d7779d00c12aeb6b55a99443952d9a144e","sha256":"79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45","sha512":"a80491b5c34e4719b042d1ef0dc8cff0e2ad29343ac8926a3cab36202b02dc360000b430b3141e474fe08bffc54329eb47082d530af6b44727490c4cd0f0ed0c","ssdeep":"","tlshash":"ee11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","first_seen":"2023-03-29T22:52:25Z","last_seen":"2026-09-11T21:25:35.580686Z","times_seen":55435,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js?ver=4.27.8","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.859Z","timestamp":1789154958859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js?ver=4.27.8 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6a879d4f-33517\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Fri, 21 Aug 2026 00:35:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js?ver=4.27.8\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: ad8c84d5aeb7630feaf697ed5bfc0ba9\r\nx-gateway-skip-cache: 0\r\npriority: u=3,i=?0\r\nage: 29049\r\ncf-cache-status: HIT\r\ncf-ray: a399149caa245fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":210199,"size_decoded":54429,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"03ab81653ecf422276b76fa4e05c3684","sha1":"8ee7a7cb58e9276f406b4991905bd15db3868ae4","sha256":"69bf579b3b7d709f6b121e1a71d16837fbb1947bd9238710835676364891041f","sha512":"1f1277dc4f85cbd4bfe0ed527caf9212d10243e63551f28a5f96711a2707c76db83b05f7c070b1fe1c86d8d2d6d1f179b1f20e546937eee518e5546d8df43174","ssdeep":"3072:dixuJHV0hCtIyK24cN9CI9G34XcJ3OyUEIofe5Co:wu1V0hCtm3wG3CPEIoYCo","tlshash":"4d24d989b6d1f4b152e76069443f160af17a9c19704ae8c0e362e5e4ed7d98f6023f3e","first_seen":"2026-08-20T07:44:00.41429Z","last_seen":"2026-09-11T20:00:21.729482Z","times_seen":69,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/traffic-assets/js/tccl-tti.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.860Z","timestamp":1789154958860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /traffic-assets/js/tccl-tti.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ncontent-length: 0\r\nlocation: https://img1.wsimg.com/signals/js/clients/tti/tti.min.js\r\ncache-control: max-age=31536000\r\nexpires: Sat, 11 Sep 2027 19:29:18 GMT\r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T21:24:33.483856Z","times_seen":18410768,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":11,"connect":3,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/tti/tti.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.043Z","timestamp":1789154959043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /signals/js/clients/tti/tti.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cr-digitaldefence.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: E3YfzZ3oMpMeLE/g4LRZAqgDpF7eeSGzmFIOcRRsDqa1UBWhMrIGNxI5CHxj3gEkbAh6qS9gFxQ=\r\nx-amz-request-id: S9K3MR2VNKZ02DY6\r\nlast-modified: Thu, 19 Feb 2026 18:11:29 GMT\r\netag: \"1c56940a864f144fae2eb40ee952cb94\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-version: 0.2.1\r\nx-amz-version-id: GnRAqSJ.VC0mp7LB85NMK_kodthX5D61\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=1800\r\nexpires: Fri, 11 Sep 2026 19:59:19 GMT\r\ndate: Fri, 11 Sep 2026 19:29:19 GMT\r\ncontent-length: 7570\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21592,"size_decoded":8220,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21556)","md5":"1c56940a864f144fae2eb40ee952cb94","sha1":"ebfc754ce962a1f9025853f2995b3987f0383d87","sha256":"3c37a4aa3cf6aaae6921a4b750c0e4f81fd338d6878be90b0faf2f921039cb23","sha512":"aef4b08a01d56bd8855653499b375db11d8fd7d67c4bcdc74323236badc47b70ddfedc14ce89828736c63ffe147bf71c14311580296d41b59f11a3305993addd","ssdeep":"384:/z+lhnKuowsx9pGxw57yty3eOHenS934osy:JioFP934Y","tlshash":"a5a2e7cdf6e0b07a13b72072903f520bf236b625180a40a4a279e9f57cb555e5227fbd","first_seen":"2023-10-20T03:52:57Z","last_seen":"2026-09-11T20:34:15.219777Z","times_seen":43953,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/uploads/2023/11/main-bg.jpg","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.092Z","timestamp":1789154959092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/main-bg.jpg HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 201770\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\netag: \"65421cca-323b8\"\r\nexpires: Mon, 12 Oct 2026 19:29:19 GMT\r\nlast-modified: Wed, 01 Nov 2023 09:39:22 GMT\r\nserver: cloudflare\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/uploads/2023/11/main-bg.jpg\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: f2c37db5bb86622c7412a811f525cf71\r\nx-gateway-skip-cache: 0\r\ncf-polished: ok, orig_size=205752\r\npriority: u=1,i\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept-encoding\r\nage: 29048\r\ncf-cache-status: HIT\r\ncf-ray: a399149e4b5d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201770,"size_decoded":202488,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1920x1080, components 3","md5":"16f71a7f4213b973045bc75f33ad0fe2","sha1":"e774f92a86ca63bc20a7300c9cf277aa188ddb10","sha256":"835fdfb1b667e4a5af092f30be263b33bc93e255ecd968a303fb21dad7e24142","sha512":"a997d49122a3cabb80bc6614350d89a01d56caa0aebeb1a7793dab3a6f6c167c2382c5593981e7b6642a85412816d4ccd8882fc15923b309f32420c7c1cfce64","ssdeep":"3072:J9VVyO7/TXKSR22wFr2sWAMiyoElojwzCw05l0j/R8RwfU+9Jb9PFZnu1:fVVz/GgYrZWdPlfu5lm/6RWJb9P/Q","tlshash":"b2141395fbc9e206c5785a31c2fe1614d82251fc968392f4c1c85b404e78afdf0faba6","first_seen":"2026-09-11T19:28:11.278766Z","last_seen":"2026-09-11T19:29:57.804533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026subset=latin,latin-ext\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.828Z","timestamp":1789154958828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Montserrat:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026subset=latin,latin-ext\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 11 Sep 2026 19:29:18 GMT\r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34812,"size_decoded":1796,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"76e3e3043c43750b4048643e10e5a17b","sha1":"2dae7be8964bb1302e040a78d80621749d6053d8","sha256":"8657d26f0c60d5b2f909f2745b6a2d8df7efad9b3de73c0d33171c6214df8c05","sha512":"16dd77ebf3efd8897bd62ff43852e13251ea57f1661acd3a9650858986215f7a817ee902f5403b937a602154ee8203b85dd682c06629932fd18de0c44c2148ee","ssdeep":"384:A3Cw37F3Y3I3wHwcFFB5YwNFu+GNw+Fr/PWw/FkEUrwAFRd9cwxFqqKRwyF3rz6l:0Zds8FdCWQp","tlshash":"46f2af911057e500ea472cc523cf7e26de4e666674a4c5797ffd2ca8adeac221324b2c","first_seen":"2025-09-05T02:49:53.621529Z","last_seen":"2026-09-11T20:27:36.342931Z","times_seen":14761,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":114,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.848Z","timestamp":1789154958848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6a7c9293-3509\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Wed, 12 Aug 2026 15:34:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 69425643c4ca10ab57a1250754e52fdd\r\nx-gateway-skip-cache: 0\r\npriority: u=3,i=?0\r\nage: 29050\r\ncf-cache-status: HIT\r\ncf-ray: a399149caa095fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":5343,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-11T21:25:35.601245Z","times_seen":964174,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/plugins/supreme-modules-pro-for-divi/public/js/swiper-bundle.min.js?ver=4.9.97.41","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.856Z","timestamp":1789154958856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/public/js/swiper-bundle.min.js?ver=4.9.97.41 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"69783a1a-239c1\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Tue, 27 Jan 2026 04:07:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/plugins/supreme-modules-pro-for-divi/public/js/swiper-bundle.min.js?ver=4.9.97.41\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 61b0c1f3187ca4090c30fb3e9e0bb186\r\nx-gateway-skip-cache: 0\r\npriority: u=3,i=?0\r\nage: 29049\r\ncf-cache-status: HIT\r\ncf-ray: a399149caa215fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145857,"size_decoded":37234,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65284)","md5":"adf4d8a8269c6de5a15e081e838d47a0","sha1":"f64bdee46be3b38377cc333baa08b5d091cd878e","sha256":"568c3ba372e075ecceb821409f5d45be311c896c3c784910eb5f2f20e5c90670","sha512":"6ad0678a60f047ec98d3e5d818af3f20bbb21e64b05345ab2386f204e39a2a360fced67b565b1adc31f7f361aab9cdfcb46bedf1d56b7b61ef1c562129d45e5d","ssdeep":"3072:Fo6dezM8ABXhOoMcrOpADH79cVOd3dqIrv9:G6diMNOoMcrOpADH79cVOd3dqIrF","tlshash":"cce31789b364b2a151e73256539ed10263b65805b80ad1a470768cd7acbde8c03bfffd","first_seen":"2023-03-07T12:23:22Z","last_seen":"2026-09-11T19:29:57.807066Z","times_seen":1173,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/plugins/supreme-modules-pro-for-divi/includes/modules/CardCarousel/frontend.min.js?ver=4.9.97.41","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.857Z","timestamp":1789154958857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/includes/modules/CardCarousel/frontend.min.js?ver=4.9.97.41 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"69783a1a-13bd\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Tue, 27 Jan 2026 04:07:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/plugins/supreme-modules-pro-for-divi/includes/modules/CardCarousel/frontend.min.js?ver=4.9.97.41\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 094758e0b24c21aea0690ad0914789c4\r\nx-gateway-skip-cache: 0\r\npriority: u=3,i=?0\r\nage: 29049\r\ncf-cache-status: HIT\r\ncf-ray: a399149caa225fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5053,"size_decoded":2287,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5053), with no line terminators","md5":"0a1e547b03127da12f23279c1af441d6","sha1":"5ca6d24031d1f3d0c3a92308c9ed5085873029b3","sha256":"9561042506851459a2f3da1f04b335760d424edc9802f4dd67083888f647b75e","sha512":"9540053be3f0aa6e87b77f121ff1a722f10f0c7b54979c792a3e4785988807353838c76a46fd62d94179008553dc69ffd0963439359208d3a7f4f454f5a4645d","ssdeep":"96:txE29yTU7Yuw3sidioTl4YyNF/GkGy+tx53cx5375cH:R9SvZrEoTaYyNF/GkGD538530","tlshash":"b4a1a9ba6610709905f358d84809eb0033f14c92c5b55970e4eea4197ede91e25ffbfd","first_seen":"2026-03-05T13:58:03.423828Z","last_seen":"2026-09-11T19:29:57.807763Z","times_seen":48,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.113Z","timestamp":1789154959113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:19 GMT\r\ncontent-type: font/woff\r\ncontent-length: 92084\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\netag: \"6a879d4e-167b4\"\r\nexpires: Mon, 12 Oct 2026 19:29:19 GMT\r\nlast-modified: Fri, 21 Aug 2026 00:35:26 GMT\r\nserver: cloudflare\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: b9116dbc0cd1fac689b81d9780a95e94\r\nx-gateway-skip-cache: 0\r\npriority: u=3,i=?0\r\nage: 19412\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a399149e6b765fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92084,"size_decoded":92852,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 92084, version 2.4","md5":"4f7c51948ce1b802a13ebbccec151d0c","sha1":"5b1d3cd0929108da4b6334c4a487db08c9520f1d","sha256":"fe67b77ac7e0ef4b482dafb86adfa403db1b89a2f337d2dc8bd1278cfe975196","sha512":"87fab156e0c1e79f4dd07075cee8905dcc8c01c7708fbf6e9f6592f1c0f62083c86d0076ec23f73fc4351b51d6e03951ff7aece0ad9305488b910a8f8fefb023","ssdeep":"1536:n2S6qLRqKELiXMjCs7VDmGWALXJ8jzxJ9OIgr26F9BEFDTs8/M/OuWhX5j63QWIh:n2S6qLRqKELiXMjCs7VDmGWAN8H79OIl","tlshash":"e593f97bc3cbcf7fe955e775087b4a252dfadb26926fc40e9a451c869504cf80d28290","first_seen":"2023-09-22T00:38:17Z","last_seen":"2026-09-11T20:18:30.478934Z","times_seen":47188,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/uploads/2023/11/hero-bg.jpg","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.489Z","timestamp":1789154959489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/hero-bg.jpg HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP; _tccl_visitor=5f95e6f0-e4a5-462b-bb12-7e56ba3fea25; _tccl_visit=5f95e6f0-e4a5-462b-bb12-7e56ba3fea25; _scc_session=pc=1\u0026C_TOUCH=2026-09-11T19:29:19.350Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 212436\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\netag: \"654217d9-3537d\"\r\nexpires: Mon, 12 Oct 2026 19:29:19 GMT\r\nlast-modified: Wed, 01 Nov 2023 09:18:17 GMT\r\nserver: cloudflare\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/uploads/2023/11/hero-bg.jpg\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 0b8705e35da0125de4543508d0457492\r\nx-gateway-skip-cache: 0\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=1,i\r\ncf-polished: ok, orig_size=217981\r\nvary: accept-encoding\r\nage: 19409\r\ncf-cache-status: HIT\r\ncf-ray: a39914a0de175fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212436,"size_decoded":213154,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1920x1080, components 3","md5":"796e262ba1857a5ee7a82b2a7b7de4df","sha1":"0dcb78aa54695b6b81b003cf35e44841b77060c6","sha256":"95496afdafe61d92c482f0923c5c5e92a61c2c2f9cb797fd427d06ee8006716a","sha512":"8d92dd4d9513e3e02c6e2c0bfa9f39dcbbaffef95b379fcc19ea488d22b29c2fe1c4849684778cf6cb593919fd7d98fedff26c256649149a58701ed1412723e9","ssdeep":"3072:lhIoM6+UfCjY39HRWZuV/R9n8sVCQbsjAlmY5JoIfJCEXfkkxk0ordSes0+c:lhD+mRqub98sbPLnoIfcuk0uoc","tlshash":"a3241385b4570023e2847478fe5bc772a6e5a8e379de87b8120293a5d0de76c572c3ec","first_seen":"2026-09-11T19:28:11.288998Z","last_seen":"2026-09-11T19:29:57.809157Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/uploads/2023/11/cropped-favicon-32x32.png","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.736Z","timestamp":1789154959736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/cropped-favicon-32x32.png HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP; _tccl_visitor=5f95e6f0-e4a5-462b-bb12-7e56ba3fea25; _tccl_visit=5f95e6f0-e4a5-462b-bb12-7e56ba3fea25; _scc_session=pc=1\u0026C_TOUCH=2026-09-11T19:29:19.350Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 880\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\netag: \"6542180e-43d\"\r\nexpires: Mon, 12 Oct 2026 19:29:19 GMT\r\nlast-modified: Wed, 01 Nov 2023 09:19:10 GMT\r\nserver: cloudflare\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/uploads/2023/11/cropped-favicon-32x32.png\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 6591c38d30fda0544693c8810c0ed6f2\r\nx-gateway-skip-cache: 0\r\nvary: accept-encoding\r\ncf-polished: ok, orig_size=1085\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\nage: 19411\r\ncf-cache-status: HIT\r\ncf-ray: a39914a258195fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":880,"size_decoded":1607,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced","md5":"0bbfe5ea61547847dc3083853f7a0636","sha1":"1f98705db1d310254b5838931909cac3b2ba1337","sha256":"648a30213962c8dc6695eb03098a06deb6772a250e9d54c3591ef0f1e01b4cbd","sha512":"b51a4fd2cb6928b0d3ca82ce4db136872726c6a6cb2288f69890ada0eee1acafdffd8d602e0bcff95af0b7ba971421b32c2ee0ab66633056b482740b00915616","ssdeep":"","tlshash":"84116376b5a0a97e46e0a6225c139123f1485f104ca300444d9f9a6898e39eb5ad4af2","first_seen":"2026-09-11T19:28:11.283121Z","last_seen":"2026-09-11T19:29:57.81044Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T19:29:18.388Z","timestamp":1789154958388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a399149a0e8f783d-OSL\r\ncf-cache-status: HIT\r\nage: 1756906\r\ncache-control: public, max-age=2678400\r\nset-cookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP; HttpOnly; SameSite=None; Secure; Path=/; Domain=cr-digitaldefence.com; Expires=Fri, 11 Sep 2026 19:59:18 GMT\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Fri, 11 Sep 2026 19:27:30 GMT\r\nlink: \u003chttps://cr-digitaldefence.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://cr-digitaldefence.com/wp-json/wp/v2/pages/10\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://cr-digitaldefence.com/\u003e; rel=shortlink\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 1787359536.593|standard|https|cr-digitaldefence.com|||/\r\nx-gateway-cache-status: HIT\r\nx-gateway-request-id: 820b30e39ff50e3d8b7be7e6f1365ea5\r\nx-gateway-skip-cache: 0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP","quoted":false,"path":"/","domain":"cr-digitaldefence.com","expires":"2026-09-11T19:59:18Z","raw_expires":"Fri, 11 Sep 2026 19:59:18 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP; HttpOnly; SameSite=None; Secure; Path=/; Domain=cr-digitaldefence.com; Expires=Fri, 11 Sep 2026 19:59:18 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:7.0.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":161121,"size_decoded":29087,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (26347)","md5":"7b3b398b86a2a333ee5e67d553a96224","sha1":"dd64258d01233cca4b086702878f630299e6ac63","sha256":"ccad972a6efd3b0c151bab2878ba736e4ac709254e17cf79675921dccbf721d7","sha512":"66d421a3edea4eedd3a18d343fff22d291ea44c7ae63264be8703d94e3e4448e958e734113690ba3a8ef8d255e83788d7ecf52dfd3ba26003ec0051eb7ec7a78","ssdeep":"3072:+LhYwX4ke980wdHfsjJy51ah93389CNww3y/:Wr4ke9J1Q","tlshash":"adf30a5edbba3075310b4325bdd5a32491ecc133ea910ed2f8b6d1284fc5aa615bb21f","first_seen":"2026-09-11T19:28:11.284657Z","last_seen":"2026-09-11T19:29:57.811813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":32,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-includes/css/dist/components/style.min.css?ver=7.0.4","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.637Z","timestamp":1789154958637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-includes/css/dist/components/style.min.css?ver=7.0.4 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6a7c9293-17c91\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Wed, 12 Aug 2026 15:34:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-includes/css/dist/components/style.min.css?ver=7.0.4\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 64ab7cbfbe3d3415c0d0dd66ff872c99\r\nx-gateway-skip-cache: 0\r\npriority: u=2,i=?0\r\nage: 29052\r\ncf-cache-status: HIT\r\ncf-ray: a399149b78bb5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97425,"size_decoded":13554,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"bec4d191af2b1755e18de2d4e528d921","sha1":"069c718930a87eb1050c9a897650c142435a51c3","sha256":"bc5a89aa0f9b629ff98b89e263cd55dffae103f4fec83b6c75a946ba49a761ca","sha512":"2a778b5a058a0a18f9f9808907280f0d33a1ca881750f96cb5fef1f1522502fd27b23d378929c12944f50b6dbd2eeb725d86a32be5f8022c711c832d00cdbdbc","ssdeep":"768:qZ5Zi5xhtx1XolTAaZxuSL/2EKCknWs5D9oTJ7YhvOdJs9jb9jSHtxISM8MJcDAE:5Rx1XolTAaZxzs5D9oTJ7Fo7E","tlshash":"3193c67190101d3a61e3d3b85370fd1b22d452c5dec3eadaa453aad8cbc718e096b6db","first_seen":"2026-05-02T02:54:31.264464Z","last_seen":"2026-09-11T19:29:57.813267Z","times_seen":3669,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.842Z","timestamp":1789154958842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6a7c9293-2bf8\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Wed, 12 Aug 2026 15:34:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 91a4d11ba1a3ba45f3eeed426f8ceedf\r\nx-gateway-skip-cache: 0\r\npriority: u=2,i=?0\r\nage: 19416\r\ncf-cache-status: HIT\r\ncf-ray: a399149ca9fd5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11256,"size_decoded":3049,"mime_type":"text/css","magic":"ASCII text, with very long lines (11256), with no line terminators","md5":"2b0dd7eecea03b4bdedb94ba622fdb03","sha1":"703becba85161118dd6fc66af465428ef43f561c","sha256":"b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646","sha512":"fe64cff950921bdf83ec09fe79ca5ce52de40f5b8788697eb1d7b28055f2817778347d5d3c81a324801c7ec7151b3ee0eee99b2882c3c3b10bd760342d3bf3e7","ssdeep":"192:xthsVmeDXDanvgZenjAJKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDanvuenjAkNBhDInSwh31r","tlshash":"713223929c88212cf43795645ac107ec923fc303fd62ededb73c7679caca58a516a943","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-09-11T21:25:35.6088Z","times_seen":93980,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/themes/Divi/includes/builder/styles/images/preloader.gif","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.090Z","timestamp":1789154959090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/styles/images/preloader.gif HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:19 GMT\r\ncontent-type: image/gif\r\ncontent-length: 6431\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\netag: \"6a879d4f-24d3\"\r\nexpires: Mon, 12 Oct 2026 19:29:19 GMT\r\nlast-modified: Fri, 21 Aug 2026 00:35:27 GMT\r\nserver: cloudflare\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/themes/Divi/includes/builder/styles/images/preloader.gif\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: ce8c10094e8e983a37a44ce820cf6b21\r\nx-gateway-skip-cache: 0\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=1,i\r\ncf-polished: ok, orig_size=9427\r\nvary: accept-encoding\r\nage: 19414\r\ncf-cache-status: HIT\r\ncf-ray: a399149e4b555fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6431,"size_decoded":7172,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"079254dd17131a2982f513a97dc0e9d3","sha1":"5de83dea60a6e1aeb9903628cceec9e2325530bc","sha256":"1e6ee8f9f92d497087efdb9c47051e554e9be016a3240ff23175dba7852c7e5f","sha512":"5fed17e420262b941611df1367ea31b77f1760159b09129420d40e3e01cd649d01cf3e3ef6c8b811e3c868c55457ad10cc19e903b279c97413fa1a4cbe68d9ee","ssdeep":"96:3Saw0nyfvI41uol14EfEm1TTps5hv4e/U9oBUfm5qxpgmHzenfyLIpEcH6uo3Mnx:DDyT1TlWkdK/436uICpgmHaa8pRjnx","tlshash":"6ad18c4e2873c059f0262ebb62ba5e989761cf35acd8f14e1e4f30e0b8309dc4a05527","first_seen":"2023-05-04T14:34:58Z","last_seen":"2026-09-11T19:29:57.814942Z","times_seen":426,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ywxi.net/rpc/tmjs/cr-digitaldefence.com/visit?rand=1789154964289","fqdn":"cdn.ywxi.net","domain":"ywxi.net","tld":"net"},"ip":{"addr":"143.204.238.60","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:24.293Z","timestamp":1789154964293,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /rpc/tmjs/cr-digitaldefence.com/visit?rand=1789154964289 HTTP/1.1\r\nHost: cdn.ywxi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 140\r\nlocation: https://www.trustedsite.com/rpc/tmjs/cr-digitaldefence.com/visit?rand=1789154964289\u0026hash=1789154964520\r\ndate: Fri, 11 Sep 2026 19:29:24 GMT\r\nserver: Apache\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-robots-tag: noindex, nofollow\r\ncache-control: no-store\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 195f7f7651272570d2f9df923feb0f6c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: TqdzEQFExvOcpwBcDnLN6bNYrbWbYcTHq6eSBP6Y3OyQdgV2VpFJ_w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T21:24:33.483856Z","times_seen":18410768,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trustedsite.com/rpc/tmjs/cr-digitaldefence.com/visit?rand=1789154964289\u0026hash=1789154964520","fqdn":"www.trustedsite.com","domain":"trustedsite.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:24.619Z","timestamp":1789154964619,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /rpc/tmjs/cr-digitaldefence.com/visit?rand=1789154964289\u0026hash=1789154964520 HTTP/1.1\r\nHost: www.trustedsite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cr-digitaldefence.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T21:24:33.483856Z","times_seen":18410768,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/css/magnific_popup.css?ver=4.9.97.41","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.830Z","timestamp":1789154958830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/css/magnific_popup.css?ver=4.9.97.41 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: \"6a879d4e-1946\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Fri, 21 Aug 2026 00:35:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/css/magnific_popup.css?ver=4.9.97.41\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 125051f37a5ae28b2e9cfe8a65029eaa\r\nx-gateway-skip-cache: 0\r\npriority: u=2,i=?0\r\nage: 29052\r\ncf-cache-status: HIT\r\ncf-ray: a399149ca9e75fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6470,"size_decoded":2298,"mime_type":"text/css","magic":"ASCII text, with very long lines (6470), with no line terminators","md5":"9389a240ec2d748902e2f3d837d46912","sha1":"8c5e52769ff791c2751cde97d2f59b2b11d095d3","sha256":"ca3af915877e0f119ce0df14dfce6249f76222c600e23882fa7c7f99788971cc","sha512":"66b15795777de6d0f465c9afb67f8b6808333e8e7454c3bbc26783748f29a74ec365f18b520fbedce88e7137d1919025d0e65836bdc58007f623255b66a3feed","ssdeep":"96:HaiIwxc4SZIORnNj0aZ/XH9iNOsaD+XicVDAdVMk9HcCWhR:6NNZIORnNwaZ/X9iAD6wMk9zWhR","tlshash":"fbd165e2a141327ad532cd56e183ab1c27279263f67306efdf86a918c6cf4de0265348","first_seen":"2023-04-07T08:44:48Z","last_seen":"2026-09-11T20:00:21.751492Z","times_seen":7681,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/popup.css?ver=4.9.97.41","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.834Z","timestamp":1789154958834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/public/css/popup.css?ver=4.9.97.41 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"69783a1a-1389\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Tue, 27 Jan 2026 04:07:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/plugins/supreme-modules-pro-for-divi/public/css/popup.css?ver=4.9.97.41\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 17696e3a1cce860bec6996d0bee56fe7\r\nx-gateway-skip-cache: 0\r\npriority: u=2,i=?0\r\nage: 29051\r\ncf-cache-status: HIT\r\ncf-ray: a399149ca9ec5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5001,"size_decoded":1442,"mime_type":"text/css","magic":"ASCII text, with very long lines (5001), with no line terminators","md5":"de3e0625d50bcb2e7b8c552585307bc0","sha1":"68e4453126243cdcd4d843f6208d0125987c0a11","sha256":"2f1e0ba0f1a9560f8d67fb010c58f8995fa681625c321e18133ccec0043bce47","sha512":"8aaba984c7c49f88ff7495711bcf6fef2e5a4d68a0680cdb5d56607bb5e67691c5ba8ef5c492fee32f4f1b27f7369eadfb0846180247e37c010f3d57ff83a209","ssdeep":"48:cXM4UvcnWInlXj6R6X9rHcrfmScE7vrHcnlgVcxrxFrxwZhrxJrxZrxmrxa0L0Wm:hyp+RD77cKOYvBcAF","tlshash":"aba107318a333522babaf746f6914e08e560ad03fbde1dbf6145c50d56c7cc0825e5ac","first_seen":"2024-02-27T15:23:22Z","last_seen":"2026-09-11T19:29:57.816622Z","times_seen":3244,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/themes/cr-digital-defences/style.css?ver=4.27.8","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.840Z","timestamp":1789154958840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/themes/cr-digital-defences/style.css?ver=4.27.8 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6542174e-26e\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Wed, 01 Nov 2023 09:15:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/themes/cr-digital-defences/style.css?ver=4.27.8\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 0f352d14b368f6ef14b7039d9dcc273f\r\nx-gateway-skip-cache: 0\r\npriority: u=2,i=?0\r\nage: 29051\r\ncf-cache-status: HIT\r\ncf-ray: a399149ca9f45fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":622,"size_decoded":967,"mime_type":"text/css","magic":"ReStructuredText file, ASCII text","md5":"c1ba84072ab845445e3183d5ba8d8cc3","sha1":"a22bdaeaa99dd499d708f3272547c4580f52d5eb","sha256":"0822c9ccf7b9f5bcff7285ba49a18d4bbefe98677bbb4fb57d9ffb504bf3d1fe","sha512":"f60c76d2fb038a850b4653780804546399cff81a69daf08cd271b1f33db7d46aa2bb5494466f60963c26cea6446f5f1b033936ac2768ccad1e469d76210ca0f3","ssdeep":"","tlshash":"aaf0817fb14b2020f73012365a562b679a29531873858e255c1a66305372b975972199","first_seen":"2026-09-11T19:28:11.279718Z","last_seen":"2026-09-11T19:29:57.81758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/et-cache/10/et-core-unified-deferred-10.min.css?ver=1787359766","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.841Z","timestamp":1789154958841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/et-cache/10/et-core-unified-deferred-10.min.css?ver=1787359766 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"6a88f216-32c7\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Sat, 22 Aug 2026 00:49:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/et-cache/10/et-core-unified-deferred-10.min.css?ver=1787359766\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 220f98a011dad3287dbd1b3045ecab4c\r\nx-gateway-skip-cache: 0\r\npriority: u=0,i=?0\r\nage: 19416\r\ncf-cache-status: HIT\r\ncf-ray: a399149ca9fb5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12999,"size_decoded":2436,"mime_type":"text/css","magic":"ASCII text, with very long lines (12999), with no line terminators","md5":"93ff168164f28612916a103f0df9f221","sha1":"6105b1a68ec54fcdf8999bfef0b7158ca0042b12","sha256":"b785eeddfb0078ae70e28841374c93d23d6333f9035e28c7f31a896af4be2d98","sha512":"d3c229e201073fe745d72c90419c4f0b2db8bad0ae14fb7eca68365819ddaff158fa01bb7cb7d219407dce406e09f24eed56f7ee741e88ed72db2d4a300b6a2a","ssdeep":"384:5G1FNl5NNW/8woFAk7Xa4GzTQxC4AHeF/:OAvzTQYM/","tlshash":"0542300efb72b1b57517165fbc267ab4fb4c8803a6ae49e1bc53e558c7c20b3012562e","first_seen":"2026-09-11T19:28:11.307434Z","last_seen":"2026-09-11T19:29:57.818915Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cr-digitaldefence.com/wp-content/uploads/2024/03/website-hero.mp4","fqdn":"cr-digitaldefence.com","domain":"cr-digitaldefence.com","tld":"com"},"ip":{"addr":"160.153.0.178","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:18.918Z","timestamp":1789154958918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cr-digitaldefence.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 10:21:12 GMT","end":"Wed, 21 Oct 2026 11:21:07 GMT"},"fingerprint":{"sha1":"88:0A:7C:64:B1:C5:A8:5E:AC:62:BE:FD:A2:52:22:FD:A1:C3:1C:3C","sha256":"B8:F3:F4:51:CF:D8:69:72:8D:50:DD:9C:5A:9A:54:D2:34:3B:FB:80:D5:D9:06:B1:8C:1C:EC:5F:0B:E8:E3:30"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/website-hero.mp4 HTTP/1.1\r\nHost: cr-digitaldefence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cr-digitaldefence.com/\r\nCookie: __cf_bm=Yt0UOIlGlQvEyEWjggfedUP8lxkK4_ppX2IbzPrwcsI-1789154958.4115288-1.0.1.1-az2UNHOOFCLcP_QeXAwxoE6tYGbqYTY_TQrf7EER6w5UpS46Ah7QrL3rcoX8VQHQEDLLqux.8AqaiKXrUp9vcp95f2e2IiTaK3YUbgwuD49V74pY48pXwBZbU734n1oP\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Fri, 11 Sep 2026 19:29:18 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 9027595\r\nage: 19415\r\ncache-control: public, max-age=2678400\r\netag: \"6602a69d-89c00b\"\r\nexpires: Mon, 12 Oct 2026 19:29:18 GMT\r\nlast-modified: Tue, 26 Mar 2024 10:42:37 GMT\r\nserver: cloudflare\r\nx-gateway-cache-key: 0||https|cr-digitaldefence.com|||/wp-content/uploads/2024/03/website-hero.mp4\r\nx-gateway-cache-status: MISS\r\nx-gateway-request-id: 99f85ab2b6b8304da24d7a453d2a4f23\r\nx-gateway-skip-cache: 0\r\npriority: u=4,i=?0\r\ncontent-range: bytes 0-9027594/9027595\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a399149d3a665fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6291456,"size_decoded":6292142,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"dfb0146224e01a59a32e0ecc6d6d0388","sha1":"6f44b23ecb6cd80b0d3e15b82b0df7d8c45c0442","sha256":"ab2003ca99698e3450b93acf480a7e5774b5e92db5b98316481f8383acef53fc","sha512":"d34667c39cf66bdf08a8be2e6a818416b3e7b530f5722c00a63e616b0f6f8699b742f919e7a948698fbc7a74fac935628328e63931c2b74b1299efdccf4dc2d1","ssdeep":"24576:Y1Y1w17UBYBF9qryvzPaekp25/wZbxR6Qbqp8:Yew74yqryvTnkpi/kbxAa","tlshash":"372523ad8e414900f748f87d2841dd6ae6e092c3cde3ea2b704e05643b752e51b6f67b","first_seen":"2026-09-11T19:28:11.277531Z","last_seen":"2026-09-11T19:29:57.781604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":390,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"cr-digitaldefence.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cr-digitaldefence.com/","date":"2026-09-11T19:29:19.106Z","timestamp":1789154959106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cr-digitaldefence.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 18:08:24 GMT\r\nexpires: Sat, 11 Sep 2027 18:08:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 4855\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38567,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-11T21:27:13.35119Z","times_seen":559813,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":29,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}