{"report_id":"3cf4772a-b66b-49d3-9cdc-e8bccfae5b89","version":6,"status":"done","tags":[],"date":"2026-05-23T17:55:48Z","url":{"schema":"http","addr":"shorta.vip/adbVw","fqdn":"shorta.vip","domain":"shorta.vip","tld":"vip"},"ip":{"addr":"104.21.6.145","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"title":"DHL - 确认您的付款。","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"1cd740ee5ff2351bf3766ee4815e87bb","sha1":"605d74adeb6f5e91008e61763c6f65d256d3933b","sha256":"7dfafd379275216883813fe03e8646a4059c9c859788c7351e42bfa1f4982bd5","sha512":"52d682fb93812dd4305f79d3a783c65348b2e023849991d09191b6fb4404ec0736d049cfe7086332b012358ced1601007454c25b8c4fdaf8c6bb9522ba0a91a8","ssdeep":"","tlshash":"c9e026e95db5c83466a0138620b1f69c2a2461a0b721ea0582d8dc7a9e20fd34ca2948","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"2026-05-23T17:55:50.90985Z","last_seen":"2026-05-23T17:55:50.90985Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"shorta.vip/adbVw","fqdn":"shorta.vip","domain":"shorta.vip","tld":"vip"},"ip":{"addr":"104.21.6.145","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-27T17:55:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"shorta.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"shorta.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"shorta.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-05-17T23:37:57.921956Z","alert_count":0,"request_count":1,"received_data":14173,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shorta.vip","ip":{"addr":"172.67.155.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-16","domain_rank":0,"first_seen":"2025-12-21T00:51:25.369556Z","last_seen":"2026-05-13T07:51:12.737368Z","alert_count":3,"request_count":1,"received_data":12833,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-17T22:18:09.532627Z","alert_count":0,"request_count":8,"received_data":268816,"sent_data":4512,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-17T22:21:01.756487Z","alert_count":0,"request_count":2,"received_data":35335,"sent_data":993,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xyfvvfyy.elementor.cloud","ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-04-29","domain_rank":0,"first_seen":"2026-04-15T11:49:37.455244Z","last_seen":"2026-05-22T06:08:51.505948Z","alert_count":111,"request_count":37,"received_data":1498102,"sent_data":22888,"comment":"","tags":null,"fingerprints":[{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Elementor:4.0.9","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-05-17T22:48:39.617247Z","alert_count":0,"request_count":1,"received_data":33601,"sent_data":526,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//uikit_custom.min.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"660d070837ba7b53c5dcec99f7f94b9b","sha1":"b6fae86591af6f1260f49f52b45256a824096351","sha256":"bc865ff931d1d97a468a025905eed3bde7282bd45450abfb759da9ac3ae9546f","sha512":"2d3a023bdbc44d0c816a68bc2d245d8f10dcf248c9bb849fb3080135370f939b757d041e6aa60e6c4e692bd3a1a725240276091553959e2dbb7a1d461ac529c0","ssdeep":"1536:L2ywZPZkYM7M5gjzK93gA3YQHOLkul2Em86xH3hDsY:L6mArgA3YbH6H31sY","tlshash":"72a3d94cb24277a603cb61b2116f554eb1337928950680a8b47dcbd60e78e4c72b7fbe","size":101753,"data":"","first_seen":"2023-03-07T16:02:36Z","last_seen":"2026-08-08T13:32:00.619497Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//cc.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f151640942f16124b2b040bcf7e228b6","sha1":"87f0b3819767c61841bc2a1d6fadfb42ae41266a","sha256":"3024cc41e53a08d72f6ee4f45c3bb5819ff88e71b948ed57475518edd2489626","sha512":"31f70e662eb61a9880ef6d1c54350f1270129b2b1868048faa407f3f4e618c1ad8bdef5709d42b67398e6221627c6dbe51a05c1a25086bb1567588d3a5e507dd","ssdeep":"","tlshash":"cd81ac01ee0501ba15376bb98f6f1584ef7584239114921af49ef6841fb3d6832eafec","size":3853,"data":"","first_seen":"2023-03-07T14:22:53Z","last_seen":"2026-08-08T13:32:00.599404Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b201513c0278ec41ea7c5ef6a9e8d49b","sha1":"01f1e02e4a0c5af5508af3ffc0123e4e5fb70b88","sha256":"d9a6b10b1adfe406ab10beb680272365118f84d0db848ece0cc31a281f279402","sha512":"a6cbbecdea94c86035d6795f4b53f48cdd0e03828801f4b8a2308d9df1f7c581b3a3283d14ff7c3d4697320b54a33b2c1502bc651bc3c83bbbe0d28696983844","ssdeep":"","tlshash":"57f09ebb0c2b90755253487e63bef54af5b6817b2500ec0a78bce4086fd4e684c39e98","size":627,"data":"","first_seen":"2023-03-07T13:20:14Z","last_seen":"2026-05-26T07:26:29.980792Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//altair_admin_common.min.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"834d2ecce9a8cc7dba36d273de52b28a","sha1":"a605a1843810a676f6018c8a0072de08b05b7ef5","sha256":"523eb9b6af99c2488af8dcd1a5cd648902c24b4981195b0d0b9f3cdaa2fd3b7f","sha512":"7f03b767abb995071975985dfa16b22bd2e2cabf22cf7fec45e00a3b020d99131806663652cdcbad740f37d6f7f8f856283bcfca5a932ace78c1dd964e21261c","ssdeep":"384:6MZ/sQfkWemBDYn6DYELVkAimm//vPFn/A2n93qoEQTxi/F5TGaObeCara/REUle:n/sQcWemBDLDTVkzmm//vPFn/A2nYoEv","tlshash":"1da2a548f560b6a611fb313a08afb14811734d35cb1980a2f52d45be4ef9f885227fee","size":23095,"data":"","first_seen":"2023-03-07T13:20:14Z","last_seen":"2026-08-08T13:32:00.606367Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e83305ab0bfdbe8803312e8269b99f6","sha1":"c68af4b2c73f52fc72bf72f583a826ca07149329","sha256":"5e6c7bfbd607990ccba5371fd0ecbad5a83cc31f92d4fc41454ce09360800897","sha512":"3241ba0369c7ee59e38fc60dc6fd913833cf175491a60aaf8089e94a7da3506ac9ce68e82a7e110b2a5ce5270fd0b566aadd7100c2e509043b70651c96cae993","ssdeep":"","tlshash":"36d023555db5c830639402467075fbd4396131a07721b501c2cccd7b6e20dd308b155c","size":217,"data":"","first_seen":"2026-05-23T17:55:50.94712Z","last_seen":"2026-05-23T17:55:50.94712Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/.cloud/rum/otel-rum-exporter.js?v=1.0.1","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c7a3287403db57171e6dfbacfd15e1c","sha1":"3eaa1d2421efcd4750ccad30bd05f35a6367f755","sha256":"e8cfcf76e72c9a3b6e029e00eb7404c394b2021e8703c0ace4c4be0df034e6bb","sha512":"c33e779b94df227f720a34b0065da898e601c6ceaac5d14e2aefd109535a303ecdffa2af4eef0f043fb50869c054955f53ce6436e1d82336f8e214b1b0b4fd78","ssdeep":"768:nz5R/hZepcYreL7AkkJ4g+rKGOFQfdk65bnrBxxYXMP1L9l9luPmVJ8SeETsCJBE:e6L09cKSdKXMP1Jlh8R/O9R+","tlshash":"3953c7e572e1b1318ba351a181370107f23e9a58754b80a8f26cd4ee7dbd44ab276f3d","size":61359,"data":"","first_seen":"2025-09-21T15:42:09.064793Z","last_seen":"2026-08-08T17:11:38.688291Z","times_seen":1016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//login_page.min.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f26c1984eb6fc31f58d073788de4157","sha1":"ed87fa78deed844a0837f9694be0ae253f90c818","sha256":"558619a267691a460b410d2f703296b87a44e2fe994b3483740c6e74c8ee8d1b","sha512":"296e278b59095f5f7be8a90b20f54e8d4437140fafeea5bf92ac856a12d762bdf1bfafaa7db98bcc6a5d1eb04e3e965701fe0efafe135ff56faf8ad57d5f0dac","ssdeep":"","tlshash":"0c010c28b63efa4c62ed713444671a24835d3a251525cf2f1a3347413f3b08b8932b5d","size":845,"data":"","first_seen":"2023-03-07T14:22:53Z","last_seen":"2026-08-08T13:32:00.588431Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"55b6e3a81dc265a6e8287b7a683d1a91","sha1":"cbeb4f0a89ea5ca00c938230bbe65b636c2fe56d","sha256":"0324c0205dc1fe44ebeb36a1fe9dfa8d6e13930d617a6141d6fa7f99d6e3ffdc","sha512":"98a2e5c0bdcc3f942de88baf6569d04d5d375aa4f81d489cd38f95fcf22f866300fe1e8d97463ab8e9902254fdaa4a9226c2ddbb6333d452e84c78cf6ae7cf43","ssdeep":"","tlshash":"1aa0024978e52501047774a85d7f500d183218276a08ea43bb9c97965f2101c9433a1c","size":76,"data":"","first_seen":"2023-03-07T14:22:53Z","last_seen":"2026-05-26T07:26:29.982045Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ec2f610910f9dfd8e87975604e5e34c","sha1":"10d61ee41e8fe816ca08616159d7b6b8294a2011","sha256":"aca73fc574e12740e3368860b88a284d01b643456f3ed6a06322ecb47750563f","sha512":"e7b30399c71c25762d3671fe662070cc2e236f6aef815084a2460df8bfe72e598ef2b7d84ff808a56d80e7af6227fddbfb45046ac8218ee647fe66b7c08b3f11","ssdeep":"384:qVCILwCiUg1IX33sDycq+AgMXUQKxrhxIZOGNG620vbgZLTE5egwolSV0yuuokwz:AwCiUqHmcd/5xdKZdt8Z3Cer2yuuDPQB","tlshash":"6ce219e9b595713613f350b2406f220bb33a7562588e8018e22bd7c16c78eded267f6d","size":33228,"data":"","first_seen":"2026-05-07T16:46:10.96487Z","last_seen":"2026-08-08T13:59:29.151794Z","times_seen":31910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fa909213a2047037c5b9d7b9f96de60","sha1":"1b146a6f61f99acb273e7da84863ccb54e81b022","sha256":"7cede503765a8340e83078e5eaf09874972ab7908987f3c9560dcb7f3fd78fe8","sha512":"74038c3f6a6edaee66119790f119e3e42db7e2ce24f80d3350525449764375cb9fbb3a003081afca3d6f229c75b6d1cf033412382924bbacb3c4d712a816450d","ssdeep":"384:8+q+K8L020RzQQSyI8n19v9b2cQr+WDlaXKHt2KtZwe/nMRq3hiJhWhHh0k7Wz2N:5Z020RzjSyI8W/DlaXi9/e5JhW/l29eT","tlshash":"9ab2a3c93dd67058c322503a4d3366d6f3af9c48241e5b9cc110a6f6bcb1f4ca66b9b8","size":23890,"data":"","first_seen":"2026-05-23T17:55:50.940519Z","last_seen":"2026-05-23T17:55:50.940519Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/webfont/1/webfont.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c96a5f11d9741541d5e3c42ff6380d7","sha1":"d3fa2564c021cf730e58ffddb138cf6b57ed126e","sha256":"81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee","sha512":"23c162a2e268951729b580e5035ad6ca9969cfcc5ce58a220817b912e76b38be6c29c3ca7680cb4e8198863d95a72ea65bd06ff7189b5c8475e4c1ce501aeab1","ssdeep":"384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d","tlshash":"7942c65d7652b26a825280f2177f060b9576fa2ab844c0bc7a89d8d46c74db8037ff7c","size":13188,"data":"","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-08-09T07:28:14.690117Z","times_seen":66865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//common.min.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"836a446f4b1173eeffc3f441dc3a145a","sha1":"6ae3d53166f94dd1114522267a47e1287d1b67f5","sha256":"1e359301246090b9c8e8a9b451d81eb83e04d04d2f98140cb216d3c3acd84cde","sha512":"7c7624485ee0de346e499d88d312356cae64479c2359efc110d5d797b341349c1abc2d9ae8d56894a154232ffdc2793444b23cb31d2d9547211f42643c23a035","ssdeep":"3072:1IU6sqU9+BwLg2ZNYKXGaiBiF+jsv49XL7Dm51g:1ln+ANYDaitu5K","tlshash":"bc444bcd72c1702203eb60a990af560af23a899ea80d8454f239d8e97c75e5d4377f7d","size":260968,"data":"","first_seen":"2023-03-07T16:02:36Z","last_seen":"2026-08-08T13:32:00.618488Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//moment.min.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c58a34f02796276b7e7109af74070cd","sha1":"a895868d27f57e0c1ef4ddf4e50c1055ff66eb15","sha256":"a076b936e9383ed6f90c614cfd4e9ce57f95481e19fe1d84450926954d268856","sha512":"a1adb98b41fa02fd2fa5b998ad46bcaa2ae1e54777c54afae82ea3db0497e5ea33c7f7c0e82bc585981216ad4063ecbec54b32b071ce4ee828effa0e7fc1d046","ssdeep":"384:h/TjmIJBUPdTW44nPIaiHHNw6Ovc6JQi+2FmZI0hAUe5wvL9E4TCNZfAvQsFaEfe:9rRnqm1EgQLaD5UeNEIECZl6fi5/LGhG","tlshash":"73f283893a96b0125b2711f448bf0907b13c98e5a44e4d29f189e8e87d7cc7d527bf78","size":34442,"data":"","first_seen":"2023-03-07T16:02:36Z","last_seen":"2026-08-08T13:32:00.587055Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e94989dab11e06f26f1fd666af45420","sha1":"dd2f55df5dce2aaa45a2393f5f21218ff595c517","sha256":"f2799db8feb2ae69968cf7e9eab8e1bf63408138075295004d64b55e83f415ac","sha512":"f20028596bc9c5636f6c6b363114752747be535a5ef13a15cf26ca6d61803dda6b30664cc6dbaeca6376e606d15df3e6e097e9c89ca71eb1b259c003079bd0ec","ssdeep":"","tlshash":"a0119c757a2a5534c685418b317eeba93d3260617a02a045c36cdc295d18e8714afcbe","size":902,"data":"","first_seen":"2026-05-23T17:55:50.948547Z","last_seen":"2026-05-23T17:55:50.948547Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//components_notifications.min.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b627c2a2eb3ed44bdaa291d0fc898316","sha1":"03e1542cffbd078f0a21ad83ad589ce1679009cc","sha256":"d136e8ae0ac9b54bac28578861fac37ad93bd89b14d253e7d9f4a51609858537","sha512":"5d96bd85790c4de68f179ac235b1af5df54266bfaabd8aa2fb74c20eba9dd896401a241d36c7920488a30a85478e53d4969c9105dca545e36d6898941932bf4f","ssdeep":"","tlshash":"6921bb0e711346042ad3f2b6365f810af33338390a1aa022335b08b11bb8ac5e261bbd","size":1137,"data":"","first_seen":"2023-03-07T13:20:14Z","last_seen":"2026-08-08T13:32:00.578995Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvoorCIPrE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/raleway/v37/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvoorCIPrE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xyfvvfyy.elementor.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22004\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 20:59:10 GMT\r\nexpires: Sun, 16 May 2027 20:59:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 593774\r\nlast-modified: Tue, 09 Sep 2025 19:08:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22004,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22004, version 1.0","md5":"9ceeb3e1e95e8998881e8f56cfca00f1","sha1":"ec4585b06ef3890ac225427d1ef49ac9fa26181b","sha256":"079304529dd9db1bdab7e005680fc30d3233e2ba828c1996a3770018334bedf3","sha512":"53c52baa944aa9f1388a2c677ca15f60fc4185507f87d8a569dae2192592d7a714276115bca12a6f2f72f4310e340217ad627eb6039c73b4ebb16e47e4ab1ed5","ssdeep":"384:YQKUCzcFsOJp1O0lvoVr2WPx/yFbXJx0DZSJgBbLUHE+vsJ9m9pKCuH1:nJhjRgVjPxsb5sZSJmHUHbkXV","tlshash":"7fa2e090583e9da8a2613192be81fcc4e07437e74c519421bd85f7edeb91821b5c24df","first_seen":"2025-06-01T10:27:58.714989Z","last_seen":"2026-08-09T04:34:00.025214Z","times_seen":937,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":147,"dns":2,"connect":20,"send":0,"wait":22,"receive":7,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcecodepro/v31/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevWnsMnx0C9.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/sourcecodepro/v31/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevWnsMnx0C9.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xyfvvfyy.elementor.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21960\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 18:23:22 GMT\r\nexpires: Sun, 16 May 2027 18:23:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 603122\r\nlast-modified: Mon, 08 Sep 2025 18:13:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21960,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21960, version 1.0","md5":"0c6758914ee7a543f7438ec914934144","sha1":"e461ec4336332b7648d66a35caeb1745438231b6","sha256":"964021ba8d03dd8d4c82137b3c92a24615c8f83ff58f7c68593b174044983a1b","sha512":"ad5163f0b66086f60635ef5ff107ce73e2bfdab362a1f8af249648d3ba335e2cc5ba371f76514c868fc341a0dfeef4db815e3291b4a277dc54722c91ae49dc31","ssdeep":"384:oY4u2jI8xMDvRqbxZk1otyrXCewMHBdhRyJkzSTVjl:t288xMDvExZ5yOew0zsVjl","tlshash":"b5a2e129cee19ceaca365530735cdbbcbc269127bcf701eeb90d247160e96c1192943c","first_seen":"2025-05-25T20:28:16.365594Z","last_seen":"2026-08-08T14:51:59.160029Z","times_seen":1376,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xyfvvfyy.elementor.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 14:48:25 GMT\r\nexpires: Sun, 23 May 2027 14:48:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 11219\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-09T07:46:26.975209Z","times_seen":257933,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Raleway:wght@500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Raleway:wght@500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 23 May 2026 17:55:23 GMT\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"408e735bc6d976b43480637dd6ed826d","sha1":"74d9bbdcee63dea77283e760bc797a5b8eacfa7e","sha256":"9ee907dd1d911805173453a49964d022486e4aa5d9c362e4a4185a24267b2090","sha512":"3b0f65a6f2f21978697a0d9a16486a373e4fc7149d7122cb09659c27371c827d23f50c631f186380a76bf677c9b6f9aec884509b6530fb331f7316e23d54c65e","ssdeep":"","tlshash":"9541dca20957d110db435dc663ce3e37ad8e11122002c17a6ffe58e8acaec2623a4b0d","first_seen":"2025-09-20T12:38:54.82767Z","last_seen":"2026-08-08T13:32:00.600377Z","times_seen":127,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":206,"dns":1,"connect":14,"send":0,"wait":32,"receive":0,"ssl":210},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1/webfont.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1/webfont.js HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/html\r\nlocation: /index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2Fwebfont.js\r\ncf-ray: a005ee68eb9056a9-OSL\r\ncf-cache-status: MISS\r\ncache-control: no-cache, no-store, must-revalidate\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\ntraceparent: 00-a005ee68eb9056a90000001779558923-a005ee68eb9056a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=9OPB6Kq9CBupawD_6hB3BfD0rJ5ZFN6sOH3qb6j1_bY-1779558923.6675825-1.0.1.1-Kwy9ngM1oHVZikDxddvPbMGX4_Q6fuQdd3_nkmbhn2MM8ORalbVdRrnwqWDPrs66Mkd4oSQf6tfkZ.scXYPp_9YomgPWgJlot30bfNvIFB62rqWbr.VGOujLYBNT9DxW; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23702,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1/files/fonts/Delivery_W_Rg.woff","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:25.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1/files/fonts/Delivery_W_Rg.woff HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//uikit.almost-flat.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=_sHLdlU6u7EUuwZR0M_5bVkISK3tQkVmNU3DPMhMLLI-1779558924-1.2.1.1-XmxGK9c0HYdkVPGD9SuD1OTl_3LFmWVRA_QmJ1yB42pQMVyR5pjKU7bHB1y4nVB8.g1.9Ca.SesAGTLKx_MYf5_diIuD8s3rKoPKmvMfitVsVMIqTNUMZtgcU_U40Bt6O0gqAGUKL6pVdy6FlhV3cNcOGY2MiHwCCVylbN.YkMLLooNpJNNgVC4QGAghEljqsgOPekZUToEZECW9A4PyWgrpJKbnoh2s6Ouls8PAlEMBS1_plUx1EFcq5Mh9zOzGWACyMxS5eH2KzxyQGW_SuMbIcX8F6eIzSExvVB1ev4fYk5sniMi2uRS5FbFs_bM3zLSggk2HGs4qI0.vo46PjQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 23 May 2026 17:55:25 GMT\r\ncontent-type: text/html\r\nlocation: /index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2Ffiles%2Ffonts%2FDelivery_W_Rg.woff\r\ncf-ray: a005ee742b8156a9-OSL\r\ncf-cache-status: MISS\r\ncache-control: no-cache, no-store, must-revalidate\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\ntraceparent: 00-a005ee742b8156a90000001779558925-a005ee742b8156a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=R2KBxEmdciI9Y6llBVaFsk32Nsp76n9V5po1Iogsmmo-1779558925.465874-1.0.1.1-LaG0VpZEhe.BcgTTxEGs3e_hNgfUjgaUbALefbqzFpWuUiq6UvYwMv0.gSCDaReq3fNRen579cLw52SfYo1xi.5NmRR3egUlVbuYsmCGdKFgDl48xllS6z4pbt2wWMg.; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:25 GMT\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":22783,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//uikit.almost-flat.min.css","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//uikit.almost-flat.min.css HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/css\r\ncf-ray: a005ee6668d856a9-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 252702\r\ncache-control: max-age=315360000\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 00:54:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\ntraceparent: 00-a005ee6668d856a90000001779558923-a005ee6668d856a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=FoaJ9vJHy0NxMERM740cC8lYbSVo5FEKXRey_.BRQA8-1779558923.2637496-1.0.1.1-gHHpEzzM0Xz42cgKUG7NtQrdF3LfxEKyXGW8uDNTe0Co3kSxpkxvZuoCGwvxPl_7MMPlEIPi.fCLmIt2fsFSziWtur6tVeidPy_eFr.7rrnsx6Y45q2fck2rzU0gKipq; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\netag: W/\"6019f434-18298\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]}],"data":{"size":98968,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (64954), with CRLF line terminators","md5":"210251cccee53e864a29e22fb6bd2348","sha1":"2d34ea62055808d9e1e6ecfcc99f8b542ef2270b","sha256":"e3ba7ab57a9c17c5dfaaa6f225c880dd6807fae54ecc3699209c553aaaa5c3cb","sha512":"8437bf914c27fc4486f8be3e9d17fe6df407085b5c319717c76f5822d1021d59534ac5740b6237aebccd3358e13cbbefff4cdb0a157d5e0053d56f38789d65a4","ssdeep":"1536:Q3BQfjghGs6ZmPG14AwJAvFyoAOZOIQr9u0yJcJdKufb/R22m:Q3BQMThOfQryJcJdKufb/Rq","tlshash":"60a365f1d00811c9af26c583abc0b67d7386f5a5faa20ddaf05f215c8fc139616a1b79","first_seen":"2023-08-31T04:05:39Z","last_seen":"2026-08-08T13:32:00.594062Z","times_seen":149,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//components_notifications.min.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//components_notifications.min.js HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a005ee66891b56a9-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 252702\r\ncache-control: max-age=315360000\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 00:43:47 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\ntraceparent: 00-a005ee66891b56a90000001779558923-a005ee66891b56a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=lTBPfzr5LfhzMAGdV4WKVdLA9QSCtOzqNNhxdgejMCk-1779558923.2882335-1.0.1.1-we8zCj810KoKKK04Ki7x3lVbSn_1OaG7Bi4ANy3nv_qCW8FdCUjaA9kHSY_q.1jUL0TXPNP17MHaNO_EgItU1YqTppnJQPJe3hLnVOX50CoVZW80wP0hzFcnDvuIQQ2b; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\netag: W/\"6019f1c3-471\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1137,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1137), with no line terminators","md5":"b627c2a2eb3ed44bdaa291d0fc898316","sha1":"03e1542cffbd078f0a21ad83ad589ce1679009cc","sha256":"d136e8ae0ac9b54bac28578861fac37ad93bd89b14d253e7d9f4a51609858537","sha512":"5d96bd85790c4de68f179ac235b1af5df54266bfaabd8aa2fb74c20eba9dd896401a241d36c7920488a30a85478e53d4969c9105dca545e36d6898941932bf4f","ssdeep":"","tlshash":"6921bb0e711346042ad3f2b6365f810af33338390a1aa022335b08b11bb8ac5e261bbd","first_seen":"2023-03-07T13:20:14Z","last_seen":"2026-08-08T13:32:00.578995Z","times_seen":196,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xyfvvfyy.elementor.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.5.0\"\r\nlast-modified: Thu, 07 May 2026 16:44:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a005ee66badc568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33228,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33228), with no line terminators","md5":"3ec2f610910f9dfd8e87975604e5e34c","sha1":"10d61ee41e8fe816ca08616159d7b6b8294a2011","sha256":"aca73fc574e12740e3368860b88a284d01b643456f3ed6a06322ecb47750563f","sha512":"e7b30399c71c25762d3671fe662070cc2e236f6aef815084a2460df8bfe72e598ef2b7d84ff808a56d80e7af6227fddbfb45046ac8218ee647fe66b7c08b3f11","ssdeep":"384:qVCILwCiUg1IX33sDycq+AgMXUQKxrhxIZOGNG620vbgZLTE5egwolSV0yuuokwz:AwCiUqHmcd/5xdKZdt8Z3Cer2yuuDPQB","tlshash":"6ce219e9b595713613f350b2406f220bb33a7562588e8018e22bd7c16c78eded267f6d","first_seen":"2026-05-07T16:46:10.96487Z","last_seen":"2026-08-08T13:59:29.151794Z","times_seen":31910,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":11,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2Fwebfont.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2Fwebfont.js HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 23 May 2026 17:55:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a005ee698c3e56a9-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nlink: \u003chttps://xyfvvfyy.elementor.cloud/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-cache-control: public, max-age=300, s-maxage=604800\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: status not ok\r\nec-cdn-supported: 1\r\nec-coldstart: \r\nec-source: dynamic\r\ntraceparent: 00-a005ee698c3e56a90000001779558923-a005ee698c3e56a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=C5IMTFnmDqtydoQje48urVeqVhBZ6YlP6SrNd4Q1Ijk-1779558923.765282-1.0.1.1-VfoqqtihCResuq6_humycDbrNmLLejUdoOnJIE.3KcqtiHCH_p0suo_hdkJk1jlYGv34TUhLwYv4WABYvgfJLIwxQNHshZWI5NPnNKLYYId0rkmCQSNM415eSWAvM_dq; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:24 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Elementor:4.0.9","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":23702,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11055)","md5":"0afe23dd640c74d69ed12c6b68a1ffe9","sha1":"d5929ed388da0a333570d2e5585be4ab1df608e9","sha256":"25cf68130517b3ba4d27a5d95fde18e9d92d6eec6ffd3d9b6e68544499a2a6ec","sha512":"4f652fc772292de34f8f6ca6574296bfc4edf8442178dc6be1088916ef33d65f4654ddd63d2357690d931ce37ef588d35a995cde30f107a26165db060e179c1c","ssdeep":"384:Molr/ZdSZUaAIkWZxEH2yZh4Wc4Z2TBd92pkgojzuLE0sl9Sccnx/k:FxZdypjDIkgo/uo0sCcyx/k","tlshash":"7cb2c772f1ba00667b5e87aac1a6731df95c99319e02a776b1f8301888a4df700f761d","first_seen":"2026-05-23T17:55:50.915921Z","last_seen":"2026-05-23T17:55:50.915921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//dhl.gif","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//dhl.gif HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:24 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1327\r\ncf-ray: a005ee6ebb6656a9-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 112614\r\ncache-control: max-age=315360000\r\netag: \"6019f444-52f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 00:54:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1327\r\nset-cookie: __cf_bm=3NsxsMoq25QQzYd_pbnovAgEQs010dXbIuNDBE4czRs-1779558924.5943446-1.0.1.1-YBbcLeB9MR2wkq3TLJAZUoZb2GgpizHxfZf8IJnz3Agpz3vn.pBvxCDZ7RMgsMDPzvsRVQtrOCbPqPdYh0aw9Np0N8HYoNjKi8llusQ4dAYLy5NwewxswGVbAgBZz5kI; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:24 GMT\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\npriority: u=4,i=?0\r\ntraceparent: 00-a005ee6ebb6656a90000001779558924-a005ee6ebb6656a9-01\r\nx-powered-by: Elementor Cloud\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":1327,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"0de70b2167051e74b14db28ae0b784bb","sha1":"7d7ca8ea7ed4da4381b5407074765ca04d6b33f1","sha256":"084e13e7b201dedca34c9a41c4cdd9f0b020c9237eb25c26eba6338e4a386b62","sha512":"345d6bb9a2ddd6cc7a200d116f38e5a01cd329ac2ebc5188fbb24361631881b3980c704b6de5bd5f2e981b8906bb961de8c34786b591d4b57510e1bf95a608cd","ssdeep":"","tlshash":"29218633b1b6f333ed74a67710561d4598685e027e229487786017986d747fae42a818","first_seen":"2023-05-04T11:55:32Z","last_seen":"2026-08-08T13:32:00.598344Z","times_seen":102,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcecodepro/v31/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevWnsMnx0C9.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/sourcecodepro/v31/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevWnsMnx0C9.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xyfvvfyy.elementor.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21960\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 18:23:22 GMT\r\nexpires: Sun, 16 May 2027 18:23:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 603122\r\nlast-modified: Mon, 08 Sep 2025 18:13:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21960,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21960, version 1.0","md5":"0c6758914ee7a543f7438ec914934144","sha1":"e461ec4336332b7648d66a35caeb1745438231b6","sha256":"964021ba8d03dd8d4c82137b3c92a24615c8f83ff58f7c68593b174044983a1b","sha512":"ad5163f0b66086f60635ef5ff107ce73e2bfdab362a1f8af249648d3ba335e2cc5ba371f76514c868fc341a0dfeef4db815e3291b4a277dc54722c91ae49dc31","ssdeep":"384:oY4u2jI8xMDvRqbxZk1otyrXCewMHBdhRyJkzSTVjl:t288xMDvExZ5yOew0zsVjl","tlshash":"b5a2e129cee19ceaca365530735cdbbcbc269127bcf701eeb90d247160e96c1192943c","first_seen":"2025-05-25T20:28:16.365594Z","last_seen":"2026-08-08T14:51:59.160029Z","times_seen":1376,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//uikit_custom.min.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//uikit_custom.min.js HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a005ee66890556a9-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 252702\r\ncache-control: max-age=315360000\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 00:45:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\ntraceparent: 00-a005ee66890556a90000001779558923-a005ee66890556a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=LL_rX2LRz0qvPzX4ErUHqoAh9TkS4hnc_ssjwWboOtY-1779558923.2822583-1.0.1.1-Evtrb.ocXPAqr6E0eVChFAnIpt9VyJFgR0Yow3SbAkqnlrTr3DKCDsKlSQiijycUR4jjgBiyKNuBKCxMjq9W.hmiRIqv3Xdq4rCNNXX97io320CpndZGkmBU52dOf9gf; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\netag: W/\"6019f228-18d79\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]}],"data":{"size":101753,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32010), with CRLF line terminators","md5":"660d070837ba7b53c5dcec99f7f94b9b","sha1":"b6fae86591af6f1260f49f52b45256a824096351","sha256":"bc865ff931d1d97a468a025905eed3bde7282bd45450abfb759da9ac3ae9546f","sha512":"2d3a023bdbc44d0c816a68bc2d245d8f10dcf248c9bb849fb3080135370f939b757d041e6aa60e6c4e692bd3a1a725240276091553959e2dbb7a1d461ac529c0","ssdeep":"1536:L2ywZPZkYM7M5gjzK93gA3YQHOLkul2Em86xH3hDsY:L6mArgA3YbH6H31sY","tlshash":"72a3d94cb24277a603cb61b2116f554eb1337928950680a8b47dcbd60e78e4c72b7fbe","first_seen":"2023-03-07T16:02:36Z","last_seen":"2026-08-08T13:32:00.619497Z","times_seen":163,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//common.min.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//common.min.js HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a005ee6688fd56a9-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 252702\r\ncache-control: max-age=315360000\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 00:45:57 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\ntraceparent: 00-a005ee6688fd56a90000001779558923-a005ee6688fd56a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=wvo1TxLu3eZLk2jCAkaNpXprQXaX92oEyY8gOywOoUU-1779558923.281292-1.0.1.1-eBuf03pMMmQZ0C3JkM0JTw0KfLELQmf1G4LC11PugiW1joINTCFXMfWMQ16olEyq9qoagIsC0OG9X8.64ybpI.Qr9DUyvYi4ccDsr3w5pi56H0x11JQe8YJoGMDwMhGw; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\netag: W/\"6019f245-3fb68\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":260968,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32023), with CRLF line terminators","md5":"836a446f4b1173eeffc3f441dc3a145a","sha1":"6ae3d53166f94dd1114522267a47e1287d1b67f5","sha256":"1e359301246090b9c8e8a9b451d81eb83e04d04d2f98140cb216d3c3acd84cde","sha512":"7c7624485ee0de346e499d88d312356cae64479c2359efc110d5d797b341349c1abc2d9ae8d56894a154232ffdc2793444b23cb31d2d9547211f42643c23a035","ssdeep":"3072:1IU6sqU9+BwLg2ZNYKXGaiBiF+jsv49XL7Dm51g:1ln+ANYDaitu5K","tlshash":"bc444bcd72c1702203eb60a990af560af23a899ea80d8454f239d8e97c75e5d4377f7d","first_seen":"2023-03-07T16:02:36Z","last_seen":"2026-08-08T13:32:00.618488Z","times_seen":163,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//login_page.min.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//login_page.min.js HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a005ee66992356a9-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 123273\r\ncache-control: max-age=315360000\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 00:43:16 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\ntraceparent: 00-a005ee66992356a90000001779558923-a005ee66992356a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=s5rnKUay94B9h6RVGo4rugYPmul0kTydt2QWfQjFXxc-1779558923.294767-1.0.1.1-nq9A2oxhKAMioJP5Msr4cA9yVS8fMmL41vk4r5Fi8QHElguopakT0mMuop0tpAqs78vJDsuueF_iiQQhDNWFqYqhInhkAZkCXN7CtWRNPwrCVUHRb6LVGoqC.B93K30y; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\netag: W/\"6019f1a4-34d\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]}],"data":{"size":845,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (845), with no line terminators","md5":"8f26c1984eb6fc31f58d073788de4157","sha1":"ed87fa78deed844a0837f9694be0ae253f90c818","sha256":"558619a267691a460b410d2f703296b87a44e2fe994b3483740c6e74c8ee8d1b","sha512":"296e278b59095f5f7be8a90b20f54e8d4437140fafeea5bf92ac856a12d762bdf1bfafaa7db98bcc6a5d1eb04e3e965701fe0efafe135ff56faf8ad57d5f0dac","ssdeep":"","tlshash":"0c010c28b63efa4c62ed713444671a24835d3a251525cf2f1a3347413f3b08b8932b5d","first_seen":"2023-03-07T14:22:53Z","last_seen":"2026-08-08T13:32:00.588431Z","times_seen":194,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 23 May 2026 17:55:24 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/1eec422858ff/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=pOAiLmj6o9A8Tynm.NwIMibg7CG6jJIMv58ou2mDgAw-1779558924.4560401-1.0.1.1-h707sQkSycRV5rqz8dTixEMShMmKn7mOjbHz4Q7UkUb5Mf3n4NDJ_QpnN7.FqNZds3Q2HaaSdepTR9zwVrSazkv88m9P9DEC8WChKfzHpdMfJlHpgk7m_51wyUBgbMx6; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:24 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a005ee6dda4756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":23890,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2F%2Ffiles%2Ffonts%2FDelivery_W_Rg.woff","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2F%2Ffiles%2Ffonts%2FDelivery_W_Rg.woff HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//login_page.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 23 May 2026 17:55:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1/files/fonts/Delivery_W_Rg.woff\r\ncf-ray: a005ee6e1a9656a9-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nx-redirect-by: WordPress\r\nec-cdn-cache-control: public, max-age=300, s-maxage=604800\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: status not ok\r\nec-cdn-supported: 1\r\nec-coldstart: \r\nec-source: dynamic\r\ntraceparent: 00-a005ee6e1a9656a90000001779558924-a005ee6e1a9656a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=sxZ2tb23.mz.lB0THoEzIFGlNuDVV2YaAkY8Ui3LsCU-1779558924.4948752-1.0.1.1-f6nJTOIserunZCqInODIGJU1ftMhcaDSKHxL2KIwIUWpzSOUNa9t_iZGcG3.issPkvNbBm34UA89WikEyhmu624btLw7wqQ4y_8brrjLmiue1TNVfNaNcZPsjfizeeeV; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:24 GMT\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":22783,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1/files/fonts/Delivery_W_Rg.woff","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1/files/fonts/Delivery_W_Rg.woff HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//login_page.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=_sHLdlU6u7EUuwZR0M_5bVkISK3tQkVmNU3DPMhMLLI-1779558924-1.2.1.1-XmxGK9c0HYdkVPGD9SuD1OTl_3LFmWVRA_QmJ1yB42pQMVyR5pjKU7bHB1y4nVB8.g1.9Ca.SesAGTLKx_MYf5_diIuD8s3rKoPKmvMfitVsVMIqTNUMZtgcU_U40Bt6O0gqAGUKL6pVdy6FlhV3cNcOGY2MiHwCCVylbN.YkMLLooNpJNNgVC4QGAghEljqsgOPekZUToEZECW9A4PyWgrpJKbnoh2s6Ouls8PAlEMBS1_plUx1EFcq5Mh9zOzGWACyMxS5eH2KzxyQGW_SuMbIcX8F6eIzSExvVB1ev4fYk5sniMi2uRS5FbFs_bM3zLSggk2HGs4qI0.vo46PjQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 23 May 2026 17:55:24 GMT\r\ncontent-type: text/html\r\nlocation: /index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2Ffiles%2Ffonts%2FDelivery_W_Rg.woff\r\ncf-ray: a005ee6f7c8456a9-OSL\r\ncf-cache-status: MISS\r\ncache-control: no-cache, no-store, must-revalidate\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\ntraceparent: 00-a005ee6f7c8456a90000001779558924-a005ee6f7c8456a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=KxLqkSEmTOIy4z7niwgfoYVqAyJge8w4zpmRVdOgvbs-1779558924.7149847-1.0.1.1-KWwjz7.HDz.HtmXsMPpXJVrFTPkc0uAt68oOBwp02E1GHccjmg2pr3mHqTTIdoAgIcDlymfhptMPkNIs8Xx1zVfQhem8LqvlKuUFEfkNABAT0FFNyPgy4.8sTphtLAVN; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:24 GMT\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":22783,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2Ffiles%2Ffonts%2FDelivery_W_Rg.woff","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:25.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2Ffiles%2Ffonts%2FDelivery_W_Rg.woff HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//uikit.almost-flat.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=_sHLdlU6u7EUuwZR0M_5bVkISK3tQkVmNU3DPMhMLLI-1779558924-1.2.1.1-XmxGK9c0HYdkVPGD9SuD1OTl_3LFmWVRA_QmJ1yB42pQMVyR5pjKU7bHB1y4nVB8.g1.9Ca.SesAGTLKx_MYf5_diIuD8s3rKoPKmvMfitVsVMIqTNUMZtgcU_U40Bt6O0gqAGUKL6pVdy6FlhV3cNcOGY2MiHwCCVylbN.YkMLLooNpJNNgVC4QGAghEljqsgOPekZUToEZECW9A4PyWgrpJKbnoh2s6Ouls8PAlEMBS1_plUx1EFcq5Mh9zOzGWACyMxS5eH2KzxyQGW_SuMbIcX8F6eIzSExvVB1ev4fYk5sniMi2uRS5FbFs_bM3zLSggk2HGs4qI0.vo46PjQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 23 May 2026 17:55:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a005ee74dc3b56a9-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nlink: \u003chttps://xyfvvfyy.elementor.cloud/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-cache-control: public, max-age=300, s-maxage=604800\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: status not ok\r\nec-cdn-supported: 1\r\nec-coldstart: \r\nec-source: dynamic\r\ntraceparent: 00-a005ee74dc3b56a90000001779558925-a005ee74dc3b56a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=RWO8lxI1tNU1qgDiX5VcUKpqJj_HVwVbEDebm.s7F_E-1779558925.5763736-1.0.1.1-Fb3DJAMPdzR6BnGavRtwMiRIN6RGLGAIqNhNAg_cjhSXrbYpFJ5wt5hwbdaZEectl104tDBCWBPe..O4Wvd8d_o73EAjj3xDVHNcpaD.UmTBVzCcALyLZUMYCEUnuUUp; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:25 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:4.0.9","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":22783,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11055)","md5":"d36b9ea7fd091eeed13ebf2860c86e7f","sha1":"30355dcba87aa735aa3d25572c3e1b5c5baeb62d","sha256":"9cba0bd59c5078c947c8045d92ae2cfc456ce35cde68ad77aec7e8853bed41f3","sha512":"32450f6942d3c4bd34e14a656853e1410a381ab656eee8385b9cc4a3e5fa0de9fc9e73c502f23fc7a8b7d36ba5b510bc0680b3b369209f3c4ba8286ae29fb0b5","ssdeep":"384:Molr/ZdSZUaAIkWZxEHuyZh4Wc4Z2TBd92pkgojzuLE0sl9SL:FxZdypjnIkgo/uo0sCL","tlshash":"d8a2c772f1ba00677b5f87aac1a2731de95c99319e02a776b1f8301888a4df711f361d","first_seen":"2026-05-23T17:55:50.918946Z","last_seen":"2026-05-23T17:55:50.918946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/cdn-cgi/rum?","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:25.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 686\r\nOrigin: https://xyfvvfyy.elementor.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nCookie: cf_clearance=_sHLdlU6u7EUuwZR0M_5bVkISK3tQkVmNU3DPMhMLLI-1779558924-1.2.1.1-XmxGK9c0HYdkVPGD9SuD1OTl_3LFmWVRA_QmJ1yB42pQMVyR5pjKU7bHB1y4nVB8.g1.9Ca.SesAGTLKx_MYf5_diIuD8s3rKoPKmvMfitVsVMIqTNUMZtgcU_U40Bt6O0gqAGUKL6pVdy6FlhV3cNcOGY2MiHwCCVylbN.YkMLLooNpJNNgVC4QGAghEljqsgOPekZUToEZECW9A4PyWgrpJKbnoh2s6Ouls8PAlEMBS1_plUx1EFcq5Mh9zOzGWACyMxS5eH2KzxyQGW_SuMbIcX8F6eIzSExvVB1ev4fYk5sniMi2uRS5FbFs_bM3zLSggk2HGs4qI0.vo46PjQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":686,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1984,\"startTime\":1779558922401,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.5.0\",\"timings\":2},\"pageloadId\":\"4055fff0-0775-4588-a7d0-1bbf7f4b9f64\",\"location\":\"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":522,\"domainLookupEnd\":522,\"connectStart\":522,\"connectEnd\":552,\"requestStart\":553,\"responseStart\":666,\"responseEnd\":666,\"domInteractive\":2014,\"domComplete\":3477,\"loadEventStart\":3477,\"loadEventEnd\":3478,\"transferSize\":4630,\"decodedBodySize\":11930},\"siteToken\":\"df67842450844fa185a3a8a88950c8ba\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sat, 23 May 2026 17:55:25 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://xyfvvfyy.elementor.cloud\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=15552000\r\nx-powered-by: Elementor Cloud\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a005ee76ee5256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//css","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//css HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1/css\r\nset-cookie: __cf_bm=BDpeaAYewp8mdTUV6GytYjgOfsxrUTTNn0q_ilmqBaM-1779558923.262703-1.0.1.1-BpfXzSL9JaX_BNY8xxUo4fTqQNRx2KsHFrSNpG5N.To3d87EmKeS2wxaMdRCHjoS2uNreTiT2HENgGjYW.wqryj0IrXSf8Y12O_SLpQVMpCARF6kILdl8Y7YK0Du9N77; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\n_cfuvid=eaNtJjL0QujGfcUXI5_qCCJr4REPmOB7DVGED2uUEIk-1779558923.262703-1.0.1.1-m6GgTPieWUa84Q7CqQBYPqo_y.gcSx6cbC2v.b_rVqg; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud\r\ncf-ray: a005ee6668d656a9-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nx-redirect-by: WordPress\r\nec-cdn-cache-control: public, max-age=300, s-maxage=604800\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: status not ok\r\nec-cdn-supported: 1\r\nec-coldstart: \r\nec-source: dynamic\r\ntraceparent: 00-a005ee6668d656a90000001779558923-a005ee6668d656a9-01\r\nx-powered-by: Elementor Cloud\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":23702,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//login_page.min.css","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//login_page.min.css HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/css\r\ncf-ray: a005ee6678df56a9-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 252702\r\ncache-control: max-age=315360000\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 00:53:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\ntraceparent: 00-a005ee6678df56a90000001779558923-a005ee6678df56a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=a8C9JtnF5tLaSzANmyOQdSBaF3rvRbVkvF_424bGZO8-1779558923.27082-1.0.1.1-inM9bTHKncy.HNu.xUXeJ5ASlpN5ihel1gMQmYLXE._KA7Ew4jQ9TkV9Bfngz8_T1qQP3p_e5FzTVaOeZBtnz1aYkWrFpn_QJpfLt38qNOT.nTtvvnoW713uAh4eadRw; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\netag: W/\"6019f419-13058\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (64986), with CRLF line terminators","md5":"ec69e730972214d8bb0fe2a89600ce06","sha1":"194d53b7d335621ac70cf31a95315acce389053a","sha256":"72120a1c75da07babdbacd3c005cb6a04149efd51c68383ae5c26a925afc189a","sha512":"9f2798dfb038eecd8b6d0ee31c91cfbeca34a53adab422e24458285cb14d98ea1db0d3ca1f18da546fdb6f981e0378dc4df59eb4a0981b295c5927d20df6e57a","ssdeep":"1536:DSwMA66j66AtOnP8nItWgdZ30AruBo6V54dqs6SnPkQfCc:umdZ30AruBo6V54d/d","tlshash":"9073c971bc0420bc7d13ceb665c0ebb6e639c503a6332daaf65d155ccf826864227b5e","first_seen":"2023-08-31T04:05:39Z","last_seen":"2026-08-08T13:32:00.595017Z","times_seen":149,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//logo.png","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//logo.png HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2150\r\ncf-ray: a005ee6678e756a9-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 104826\r\ncache-control: max-age=315360000\r\netag: \"6019f39a-296f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 00:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept, Accept-Encoding\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=10607\r\nset-cookie: __cf_bm=jOKyg.tOU6We7UoLyMb2ls556tJFv4LQ5wFpS33ecH8-1779558923.2768753-1.0.1.1-Ub9InG6mA74INrvhSj_I_5gLN.nmkTALHr2C8ZEDYQqzl3J.Bp4.LsYQctFt1Zs0SGARlcyuI794un52mdXcnDFopkQeBKF92CUOPETkdoseG2o9KR8_7ZgBg_TdreP4; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\npriority: u=4,i=?0\r\ntraceparent: 00-a005ee6678e756a90000001779558923-a005ee6678e756a9-01\r\nx-powered-by: Elementor Cloud\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2150,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"148e7959884334e6a7dd6360822e97f7","sha1":"dd6d15464e25c7f9cf35e6990fc8c4fc64c04665","sha256":"868a512d1fb675ef291cadab0f743166effad787bcb96711c9185f636c8968c7","sha512":"c809f33e3936f07e39f89d5519cef6c9be99337aee69e8abc488a2e0e63a247dcfd57d7e7c1bc8d04d3f0dab064d7a29da32f38eb1bf1c77f00fb9e09341f48e","ssdeep":"","tlshash":"9541383cf0e771e81e09a46febd1cee07c8cd422c85acf79b7a9902b8812006a0d81d1","first_seen":"2023-08-31T04:05:39Z","last_seen":"2026-08-08T13:32:00.616074Z","times_seen":119,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1/css","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1/css HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 23 May 2026 17:55:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __cf_bm=lv..ukMQp0WWh8olDneBoUV4FlvgFzSuc1ttdfo7ZNA-1779558923.4837143-1.0.1.1-GUa_OnmNYCIiPMKOvPWc7mzEZF5efpPtEHWqCr3qOPjApxmbuMMHZqdeN6jeEnsdYfkAK3R5J2BlbmrKGwAulZHSu6MjWWT_BZV4c2ox_RfO9aW_Uuq8A.2YjAMCwnrS; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:24 GMT\n_cfuvid=MicTwZby5xHqtGOe2Mmv3RLv8qMc0ERlYQrZaXocIGI-1779558923.4837143-1.0.1.1-a2S9YkvyJrN0Z7LPAafspFHjkhSy1wLxJRTLwQrTmJg; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud\r\ncf-ray: a005ee67ca5f56a9-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nlink: \u003chttps://xyfvvfyy.elementor.cloud/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nec-cdn-cache-control: public, max-age=300, s-maxage=604800\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: status not ok\r\nec-cdn-supported: 1\r\nec-coldstart: opcache\r\nec-source: dynamic\r\ntraceparent: 00-a005ee67ca5f56a90000001779558923-a005ee67ca5f56a9-01\r\nx-powered-by: Elementor Cloud\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor:4.0.9","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23702,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11055)","md5":"71faf289a4d1f4af4c7ccf6b6b83315b","sha1":"d9eb4cb29a281b0a801c00e395ff14d08055bf89","sha256":"47dc6ef787aac2a42ff0c4d7cf12657f288cf16519390eee4c27f9a419b9fbb8","sha512":"b59c9d84c1d0cd39572e400246c0fb31713694dc8e54cb5a200386b93f57f5d1d18bfb884136698d49d5cb00a0bb4b090bc1de9d19440bc8ec91ad5aa5a39d00","ssdeep":"384:Molr/ZdSZUaAIkWZxEHmyZh4Wc4Z2TBd92pkgojzuLE0sl9Sccnx/k:FxZdypjXIkgo/uo0sCcyx/k","tlshash":"35b2d872f1ba00667b5f87aac1a6731df95c99319e02a776b1f8301888a4df700f761d","first_seen":"2026-05-23T17:55:50.921145Z","last_seen":"2026-05-23T17:55:50.921145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":791,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//files/fonts/Delivery_W_Rg.woff","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//files/fonts/Delivery_W_Rg.woff HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//login_page.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 23 May 2026 17:55:24 GMT\r\ncontent-type: text/html\r\nlocation: /index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2F%2Ffiles%2Ffonts%2FDelivery_W_Rg.woff\r\ncf-ray: a005ee6cd92256a9-OSL\r\ncf-cache-status: MISS\r\ncache-control: no-cache, no-store, must-revalidate\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\ntraceparent: 00-a005ee6cd92256a90000001779558924-a005ee6cd92256a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=ZPfpEuaC915UVkay3cCE.c8qbJGFIsA4QYETa30kQnM-1779558924.2924693-1.0.1.1-211vROXYjWqwEMGIHiazytWLvOQ4wc0eeyL47LCK7mJQcnxASWc8pLXJX2Ayj4ztouwKLZ2pqathJh3A.0GWYhLciXkH21ifei6fnRR8PNIv9rnkbYytbmr.l5FH2_hR; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:24 GMT\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":22783,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xyfvvfyy.elementor.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 14:48:25 GMT\r\nexpires: Sun, 23 May 2027 14:48:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 11219\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-09T07:46:26.975209Z","times_seen":257933,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xyfvvfyy.elementor.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 14:48:25 GMT\r\nexpires: Sun, 23 May 2027 14:48:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 11219\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-09T07:46:26.975209Z","times_seen":257933,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFOKCnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmOClHrs6ljXfMMLoHQuAj-kw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFOKCnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmOClHrs6ljXfMMLoHQuAj-kw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xyfvvfyy.elementor.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23672\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 May 2026 02:32:32 GMT\r\nexpires: Fri, 21 May 2027 02:32:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 228172\r\nlast-modified: Wed, 18 Feb 2026 19:52:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23672, version 1.0","md5":"edbbd00269c18f7d0a4bccdc5cf1d89b","sha1":"1f918fe929578fab0dd8a7dfd0178ae4db6b635c","sha256":"5d0e978b6560631da2504e1612e91ee1ff959c04adae245eb320ac90cad2ba2f","sha512":"9aaaacce05eb5aede0162cf48e5ac76ab34c4fd32278e306710d80a60b6adfd17f23089c6552490cbfbe02bcbb160a3ec17770cbeb4dc7a0083406cd6bf15d12","ssdeep":"384:dPbDiVieKLJk2dTOcAaSftFo0JDKwqjqsVtsxXZ8HrIl07ZE1RBZcD83+gCIXStA:9eVQ7divaAFVZ6638H8CkRBuDK1StF9I","tlshash":"23b2e14cb447e2acafd798b13bbd47b04c30c4a7c10b8e9129cd83e869dc5914ee51ae","first_seen":"2026-02-20T03:30:02.278393Z","last_seen":"2026-08-09T07:28:02.364565Z","times_seen":1719,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-23T17:55:22.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//index.html HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/html\r\ncf-ray: a005ee647f8556ab-OSL\r\ncf-cache-status: DYNAMIC\r\nlast-modified: Wed, 15 Apr 2026 05:36:55 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\ntraceparent: 00-a005ee647f8556ab0000001779558922-a005ee647f8556ab-01\r\nx-powered-by: Elementor Cloud\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=aHsfNEteKZFzf.OZ02KE2Dgo0j17wHB5fdoELYHfoAY-1779558922.9563382-1.0.1.1-jnSVfKq4Gp7F1YPf61sJ3oyrI15G97.2aTmjqQt3HrNNQQQyXHebtvRea8RPxXvYzXeNBmBjs_U6XKhKeyIK7qM4HeAKTQvK8K5awf0ntNKWvGB_lXOhh0XEEcgGnpUo; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=15,cfOrigin;dur=0,cfWorker;dur=89\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]}],"data":{"size":11930,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1416)","md5":"473b8c8865a1b179841679f86ff8b9f4","sha1":"52971545f3afc0c93a42c0139741d0b127d74fc2","sha256":"1bf1fe7857095362df704b09b0f80d36c69b40d3e011ffb5a84da14c1e00fd4d","sha512":"3045039fd1e7444ac1ee61a2df1afb2140ea9e7f45952ad75c8bf26a9928c38b27f85936b5381dcf3a2d93762ee317d3fb15b997c892206b5f9d02999c6b3109","ssdeep":"192:xXMHg44r8hsKQDgPL9weRSkjK6WmpFmmFmnHmIXmX3mDVmR3muoOuoZyDrnx/3db:xXMHg44roSRiu0Srnx/39","tlshash":"73328521dda60416b00304d5fbf777052a36d107460edd44b2fc56a6efc2fa889a7b6c","first_seen":"2026-05-23T17:55:50.92267Z","last_seen":"2026-05-23T17:55:50.92267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":31,"dns":1,"connect":6,"send":0,"wait":113,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//cc.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//cc.js HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a005ee6668d356a9-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 41423\r\ncache-control: max-age=315360000\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 00:54:20 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\ntraceparent: 00-a005ee6668d356a90000001779558923-a005ee6668d356a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=2wwLEMND87MupNqQWXu44pu5_lD7H6Qu0QOX8UalZRk-1779558923.2619119-1.0.1.1-AJvWdW2hc9JwHbFqOQAJ_pYu2n6zKCl9oPMn0bnxG5lVoaHhBAAFd_kRfytONk3eGmURhuiTtN1l6D7GbVXRoe_9yMW6qVZurgkobTpDP9wSYtDp96RWJYgS0vdICUUo; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\netag: W/\"6019f43c-f0d\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3853,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"f151640942f16124b2b040bcf7e228b6","sha1":"87f0b3819767c61841bc2a1d6fadfb42ae41266a","sha256":"3024cc41e53a08d72f6ee4f45c3bb5819ff88e71b948ed57475518edd2489626","sha512":"31f70e662eb61a9880ef6d1c54350f1270129b2b1868048faa407f3f4e618c1ad8bdef5709d42b67398e6221627c6dbe51a05c1a25086bb1567588d3a5e507dd","ssdeep":"","tlshash":"cd81ac01ee0501ba15376bb98f6f1584ef7584239114921af49ef6841fb3d6832eafec","first_seen":"2023-03-07T14:22:53Z","last_seen":"2026-08-08T13:32:00.599404Z","times_seen":78,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//delivery-truck.png","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//delivery-truck.png HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8574\r\ncf-ray: a005ee6678ec56a9-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 104826\r\ncache-control: max-age=315360000\r\netag: \"6019f390-58a2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 00:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: accept, Accept-Encoding\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=22690\r\nset-cookie: __cf_bm=qVA_dJSIywa3OkQOUKUF0rImMjzPlzrDzf1HTE.Ertc-1779558923.2783136-1.0.1.1-vAx74uGKfJ7HM3luU._nJhEUzuNYp8CyGhA5RR915jUCefIet1dAyp_Sg7dxPP38DW73rtTdEE4NMaUejsiluBZS94rfZYMgAThOuUWMqqdXnvdFztwDwx3QTUI.RhQl; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\npriority: u=4,i=?0\r\ntraceparent: 00-a005ee6678ec56a90000001779558923-a005ee6678ec56a9-01\r\nx-powered-by: Elementor Cloud\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41ed149d632e4726b055b643ff20d977","sha1":"f83b89164058b518388eec6d79852461e65c5247","sha256":"4057f176ede9318b7e6c2fc8d784ac924af359a359e52e6d50df18eaa18bede1","sha512":"3fc1c2f4778b70a0d4c2890159673149aba7e8503dfa85e2a78901600ae7895edb60fa5b535fed386acff55069ce6bf2e6722f004b8a73cb52cf89a8ea96efc7","ssdeep":"192:wNyIkeCCXkKRapkQnLkONJ3tCc6RmFnOoWVrHGK+NfCl6e:HteClRRNJ36RonHWVLAfClr","tlshash":"6b02a045f205b5cbd178318f118a9eaf7a0905c518e4e8a58d69c1e5b60f3b1f3bf24b","first_seen":"2026-04-15T11:49:41.107095Z","last_seen":"2026-08-08T13:32:00.612214Z","times_seen":20,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//moment.min.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//moment.min.js HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a005ee6678f756a9-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 252702\r\ncache-control: max-age=315360000\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 00:46:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\ntraceparent: 00-a005ee6678f756a90000001779558923-a005ee6678f756a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=1kb20zJ.nbeaX4y0z9Yeq9Et_.bEsqmFENlklGrrfws-1779558923.2801912-1.0.1.1-LpyJruhDoxqRKP_aTLA13vtCz5jiBecvppyqGxnvxQj8cvB91xdUv8O7km6au.sPlEA5StvZkKFltfJ3cKOKhk0WNMtgblJfxluyNm1NyguM1Ede2rCE8Xm32W17G7Qy; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\netag: W/\"6019f265-868a\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":34442,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32005), with CRLF line terminators","md5":"9c58a34f02796276b7e7109af74070cd","sha1":"a895868d27f57e0c1ef4ddf4e50c1055ff66eb15","sha256":"a076b936e9383ed6f90c614cfd4e9ce57f95481e19fe1d84450926954d268856","sha512":"a1adb98b41fa02fd2fa5b998ad46bcaa2ae1e54777c54afae82ea3db0497e5ea33c7f7c0e82bc585981216ad4063ecbec54b32b071ce4ee828effa0e7fc1d046","ssdeep":"384:h/TjmIJBUPdTW44nPIaiHHNw6Ovc6JQi+2FmZI0hAUe5wvL9E4TCNZfAvQsFaEfe:9rRnqm1EgQLaD5UeNEIECZl6fi5/LGhG","tlshash":"73f283893a96b0125b2711f448bf0907b13c98e5a44e4d29f189e8e87d7cc7d527bf78","first_seen":"2023-03-07T16:02:36Z","last_seen":"2026-08-08T13:32:00.587055Z","times_seen":216,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//altair_admin_common.min.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//altair_admin_common.min.js HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a005ee66891456a9-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 252702\r\ncache-control: max-age=315360000\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 00:45:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\ntraceparent: 00-a005ee66891456a90000001779558923-a005ee66891456a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=v_PD1pe1.oMjcOPtcXxnZ2ZPhPUnBVDF4Gaj9pj_.wY-1779558923.287112-1.0.1.1-CNHxbaaRVj0.2wn8.ee9s3arsnaVr3ZUKAqheyxqnjvf6rrYuh5bFMpn46a6KQMeMZuozYWXj9.SlxGfc6mMLWfkcpa9fL8W8OjeGupiIX6yPW9i7E_it_6TUJqfjTbE; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\netag: W/\"6019f20c-5a37\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":23095,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23095), with no line terminators","md5":"834d2ecce9a8cc7dba36d273de52b28a","sha1":"a605a1843810a676f6018c8a0072de08b05b7ef5","sha256":"523eb9b6af99c2488af8dcd1a5cd648902c24b4981195b0d0b9f3cdaa2fd3b7f","sha512":"7f03b767abb995071975985dfa16b22bd2e2cabf22cf7fec45e00a3b020d99131806663652cdcbad740f37d6f7f8f856283bcfca5a932ace78c1dd964e21261c","ssdeep":"384:6MZ/sQfkWemBDYn6DYELVkAimm//vPFn/A2n93qoEQTxi/F5TGaObeCara/REUle:n/sQcWemBDLDTVkzmm//vPFn/A2nYoEv","tlshash":"1da2a548f560b6a611fb313a08afb14811734d35cb1980a2f52d45be4ef9f885227fee","first_seen":"2023-03-07T13:20:14Z","last_seen":"2026-08-08T13:32:00.606367Z","times_seen":196,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2F%2Fwebfont.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2F%2Fwebfont.js HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1/webfont.js\r\ncf-ray: a005ee67aa3e56a9-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nx-redirect-by: WordPress\r\nec-cdn-cache-control: public, max-age=300, s-maxage=604800\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: status not ok\r\nec-cdn-supported: 1\r\nec-coldstart: \r\nec-source: dynamic\r\ntraceparent: 00-a005ee67aa3e56a90000001779558923-a005ee67aa3e56a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=CsmWVPLlHdlGW2c0RXJyi2QlAQJCpqn4wLQs2oOGILo-1779558923.4644897-1.0.1.1-0Zjx5GUz_KDtfBpmBKdVxMNRMIr.I1laO5GXMftlOdLMmf4vAWIBhMfUHX2puLeBF5XD0BJ7le9WzeR8lLs5Fy2.OPPjGh0qYG6yd6eksCpqE5pdRDuKLERrOxglIvuH; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23702,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//DHL2.jpg","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//DHL2.jpg HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 111679\r\ncf-ray: a005ee6cc91c56a9-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 252699\r\ncache-control: max-age=315360000\r\netag: \"601a06d9-1dc54\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 02:13:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: webp_bigger\r\nset-cookie: __cf_bm=Nskd2jOJfMniCdWc3kWdKeTSW9zaa3pijJogyC5jFgo-1779558924.2886474-1.0.1.1-LIDIH8pRPcFa_Z8qX.bQiAsE0R9J15dCRWjTHwmp0mZ.ri.rlGvbz.wW7wzww0yFV4k2QwlunlnsRWAdx.j4xEkgjgnUHG5UXqA8WyybgQYiBWFNU1dgV2TPdCFngkxU; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:24 GMT\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\npriority: u=1,i=?0\r\ntraceparent: 00-a005ee6cc91c56a90000001779558924-a005ee6cc91c56a9-01\r\nx-powered-by: Elementor Cloud\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]}],"data":{"size":111679,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1596x1015, components 3","md5":"6275aedbfdf293c6484bd5666e80308f","sha1":"301873f19c0723152004411e5f62fbc2a79415df","sha256":"e23885c4e00866e945b70f7d10f69ed49c7aa345774e3530d855d860d7420419","sha512":"b3edb19f80796ab4480f8e328a8f99a3fcfe3951bf15a7556f9d87f7fa8c5e6fb781c3b1b95b32653d17265f551e6a2ada25ecf2fe05733ea7218666170066ad","ssdeep":"3072:znOdVMAOQdmYTFsgFTXPzaQy4HI5h/N6jD/:7opOWmMySTXPc4GNo/","tlshash":"40b312b031235f918e2a683189c902c456957c1d8c99dee620d26fa82f1d6bcff3939d","first_seen":"2023-08-31T04:05:39Z","last_seen":"2026-08-08T13:32:00.589429Z","times_seen":133,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/cdn-cgi/challenge-platform/h/b/scripts/jsd/1eec422858ff/main.js?","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/1eec422858ff/main.js? HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=wmw4eoFtAs_U1Un8a03hOGEtiKGbkvh44MfKLue8zpM-1779558924.4955611-1.0.1.1-FhPQFehgarZjSD5SPoGtt6hsuFIy5HZxwNxO3PpntaKEcZBxacfYLpAPSFzqA8q7fgcByhIjkS4pQK.ldqbg3mHMA3Cyijp.LTzCEs_gdIJ6.9.LMUfxYWoTX18G3lxc; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:24 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a005ee6e1a9856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":23890,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (23890), with no line terminators","md5":"3fa909213a2047037c5b9d7b9f96de60","sha1":"1b146a6f61f99acb273e7da84863ccb54e81b022","sha256":"7cede503765a8340e83078e5eaf09874972ab7908987f3c9560dcb7f3fd78fe8","sha512":"74038c3f6a6edaee66119790f119e3e42db7e2ce24f80d3350525449764375cb9fbb3a003081afca3d6f229c75b6d1cf033412382924bbacb3c4d712a816450d","ssdeep":"384:8+q+K8L020RzQQSyI8n19v9b2cQr+WDlaXKHt2KtZwe/nMRq3hiJhWhHh0k7Wz2N:5Z020RzjSyI8W/DlaXi9/e5JhW/l29eT","tlshash":"9ab2a3c93dd67058c322503a4d3366d6f3af9c48241e5b9cc110a6f6bcb1f4ca66b9b8","first_seen":"2026-05-23T17:55:50.940519Z","last_seen":"2026-05-23T17:55:50.940519Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//uikit.almost-flat.min(1).css","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//uikit.almost-flat.min(1).css HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/css\r\ncf-ray: a005ee6668db56a9-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 252702\r\ncache-control: max-age=315360000\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 07 Apr 2021 21:18:39 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\ntraceparent: 00-a005ee6668db56a90000001779558923-a005ee6668db56a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=Vlt6VpwSf8NSjQsOh2RyAKNWiWULRuZUtFFwajBYVu4-1779558923.2652144-1.0.1.1-zMxNP5RCU6wPdwMzFmSeC9iHcwAXgyeLsZ7498LNRypP.P1uWj_gzHhaD1W.gelvhHcHBlu3rGjSxAdzbVWRgHJl2ZVdH_CbVnfdLm3Alf2HRRQnSnmOan804WgFmB4C; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\netag: W/\"606e21af-180db\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":98523,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65455), with CRLF line terminators","md5":"05b869d022ffebceefc22609c79185f1","sha1":"2c3ff8dce6da40c5c7109f8ce0c1eeb3b7c18f99","sha256":"1e2f0203289610660b1dee5099af27e9f470d7dccf0f296bd739cffc98079f6e","sha512":"adf5e11cae30490c963bea63c76526cbd9e42253c44cd72187d185afc299dd434f45af4261ffe591094ca92526a7a8a5f432cdc3a25a983d61e079de8310bc17","ssdeep":"1536:SQTsgUGs6ZmPG14AwJAvFyoAOZOIQr9u0yJcJdKufq/R22H:SQlEhOfQryJcJdKufq/Rj","tlshash":"f8a365f1d00811c9af26c583abc0b67d7386f5a5faa20ddaf05f215c8fc139616a1b79","first_seen":"2023-09-16T02:54:56Z","last_seen":"2026-08-08T13:32:00.582314Z","times_seen":57,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//Raleway-Medium.ttf","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//Raleway-Medium.ttf HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: font/ttf\r\ncf-ray: a005ee6678e156a9-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 252702\r\ncache-control: max-age=315360000\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 Feb 2021 02:02:01 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\nec-source: static\r\ntraceparent: 00-a005ee6678e156a90000001779558923-a005ee6678e156a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=CbmeZbwpxpRXNI7oEQ3esoBgMr2QhpAHCUzBKaNUioQ-1779558923.273246-1.0.1.1-p9pGeQMhewhJSQIN70LZ6P1vBe3NEWh3sq7uyYwVrd9M6qkbPLlqbNff4FpfThIxYgMyulbo6YC_7VdanLpYXYHdhvVsJ.kPA_rW_7CCtRxQnz2PEVuRU..sjYWRgIqV; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\netag: W/\"601a0419-2a7cc\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":174028,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GPOS\", 17 names, Microsoft, language 0x409, Copyright (c) 2010 - 2013, Matt McInerney (matt@pixelspread.com), Pablo Impallari (impallari@gma","md5":"bb5ae98e4ce1a64042093dc235c305ed","sha1":"0c8681407d5de2de363187e7911e790d34d808c1","sha256":"67544b051079d750900856631013bb2c59da3b92ef45a8eeacb04ffa03ca48a8","sha512":"219146003d14e4b79e302d30dc1792ae55216b086c6e3eca7dbdeb56dcf3a6fe23c621e218088edf79a9d4cc74610186ac512673c82764f3ee96bfaeabebcaf2","ssdeep":"3072:7me7Umz/gsNggr065Ty6k4xgTeb9cY+dv2/yeVXiU1+C:7Vh/gsNprl2TG9lf","tlshash":"d9048d8373846305c2631dbcaab9c2a587a9f9212fc7834e715db67bd4d70e81d8528f","first_seen":"2023-05-04T11:55:31Z","last_seen":"2026-08-08T13:32:00.583549Z","times_seen":219,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//css(1)","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//css(1) HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 16267\r\nset-cookie: __cf_bm=bggAjHGO5_ub5i8SrBqkCqloy0eh3yDNmQSnTr0wLaw-1779558923.2759645-1.0.1.1-DKRChxUHuWY9bIBApBYMBdp8hUW2u2TBwCZAZZwZAPM_Ztwo7XbQ4qGE9qYOm93M6FRn4oOnljahXrE9fJipuNP4mvMWtB5i6zOXavKJt5PVw3OuRP3urQEa8DI829hM; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\n_cfuvid=obXha26Xbung3iO81_yVWOmtRGY3Xe3BQ5iI__RQce4-1779558923.2759645-1.0.1.1-.MB1fqexizIy_O8wLpjGG8hNpCSJ_F7dSyGkvvYH4ic; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud\r\ncf-ray: a005ee6678e656a9-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\netag: \"601a05cf-3f8b\"\r\nlast-modified: Wed, 03 Feb 2021 02:09:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: not supported\r\nec-source: static\r\ntraceparent: 00-a005ee6678e656a90000001779558923-a005ee6678e656a9-01\r\nx-powered-by: Elementor Cloud\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":16267,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text","md5":"f24a16efed7b4d060aa639a86bf9aaa0","sha1":"095befbf49a23e215bf21d27646797470e5a8dc4","sha256":"59695618c346e1e4a719d56f145686a2273c4248271fe58322b59dcbc5ac7e91","sha512":"eb5196a02aa50937bdec24579d801340f4c40fd2340dd370a1dd3afb686344f4ea5a864155a05b2775551b82c1b0b2fc31a30903d60b8dd0b42aa01c8a15a72f","ssdeep":"384:y3OC3A313Gn353P3HZeODg5AFW+bh08ULqKvQS/+DQdVsmPSDBRymYICM:UrmBmdPHgOD+AFWoh0HLqKIS/KQdVrPE","tlshash":"a672bea2048b94186b830ce177cf7939ed4e5119304dc56aebfd7c68ade3e2a439474e","first_seen":"2023-04-12T19:34:09Z","last_seen":"2026-08-08T13:32:00.595814Z","times_seen":197,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/.cloud/rum/otel-rum-exporter.js?v=1.0.1","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /.cloud/rum/otel-rum-exporter.js?v=1.0.1 HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=9ztmCXY5mcQJ7mZXDHlJjDNPd4jbMxCQpdvh6GdOjO4-1779558923.2960186-1.0.1.1-MBpd8J4ay6AA4KOhhwtCNSQSCtKRXpOvaOxjTxaI8wA2922gu.iJXvw_M5p_pqjzkuPBfGZNbjo_GesUg0SzUlJVyjpS3Q.4X.LetayXmscQ2VjMwkq9_KTgqMaVJ.9m; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\nx-powered-by: Elementor Cloud\r\netag: W/\"fd0d3f78550944198bd6edc2667f3676\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a005ee66992756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]}],"data":{"size":61359,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (61359), with no line terminators","md5":"2c7a3287403db57171e6dfbacfd15e1c","sha1":"3eaa1d2421efcd4750ccad30bd05f35a6367f755","sha256":"e8cfcf76e72c9a3b6e029e00eb7404c394b2021e8703c0ace4c4be0df034e6bb","sha512":"c33e779b94df227f720a34b0065da898e601c6ceaac5d14e2aefd109535a303ecdffa2af4eef0f043fb50869c054955f53ce6436e1d82336f8e214b1b0b4fd78","ssdeep":"768:nz5R/hZepcYreL7AkkJ4g+rKGOFQfdk65bnrBxxYXMP1L9l9luPmVJ8SeETsCJBE:e6L09cKSdKXMP1Jlh8R/O9R+","tlshash":"3953c7e572e1b1318ba351a181370107f23e9a58754b80a8f26cd4ee7dbd44ab276f3d","first_seen":"2025-09-21T15:42:09.064793Z","last_seen":"2026-08-08T17:11:38.688291Z","times_seen":1016,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/webfont/1/webfont.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:08 GMT","end":"Thu, 30 Jul 2026 15:53:07 GMT"},"fingerprint":{"sha1":"A0:20:9F:E4:EB:B9:7E:2F:51:C6:BD:BB:AF:02:44:35:C1:8D:84:74","sha256":"EB:51:AB:28:F2:0A:E5:3F:51:9B:1B:F4:37:AA:7D:8A:6F:D7:99:5E:A2:B6:9C:EC:43:85:C5:36:68:23:BE:CD"}}},"request":{"raw":"GET /ajax/libs/webfont/1/webfont.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5437\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 17 May 2026 08:11:01 GMT\r\nexpires: Mon, 17 May 2027 08:11:01 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 553463\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13188,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2134)","md5":"7c96a5f11d9741541d5e3c42ff6380d7","sha1":"d3fa2564c021cf730e58ffddb138cf6b57ed126e","sha256":"81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee","sha512":"23c162a2e268951729b580e5035ad6ca9969cfcc5ce58a220817b912e76b38be6c29c3ca7680cb4e8198863d95a72ea65bd06ff7189b5c8475e4c1ce501aeab1","ssdeep":"384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d","tlshash":"7942c65d7652b26a825280f2177f060b9576fa2ab844c0bc7a89d8d46c74db8037ff7c","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-08-09T07:28:14.690117Z","times_seen":66865,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":74,"dns":1,"connect":7,"send":0,"wait":9,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Source+Code+Pro:400,700%7CRoboto:400,300,500,700,400italic\u0026subset=latin,latin","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css?family=Source+Code+Pro:400,700%7CRoboto:400,300,500,700,400italic\u0026subset=latin,latin HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 23 May 2026 17:55:24 GMT\r\ndate: Sat, 23 May 2026 17:55:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32057,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"decd874bd0fb3321aa73822ce9bd859b","sha1":"b0e9f239c5fcc3788485ee087ed90990c5749ce3","sha256":"6966a57523c3f89249b20f9e3d44d7bdb64525cfde94dc95f8cd58d775fadd82","sha512":"a2e57d0c713a29e61771e25e10b1d56721fa3db12b10a09d09a0f7cc0be167057e6965c6a4150500f31d434cc43749080844cb0f93733e70f104c30edb68975a","ssdeep":"768:VlkbrhE49q6iFsbbYSRv4wFMl22YfRiJhan6BBYERNeWwhQHHYORjUMl:0GIHTq","tlshash":"66e24fa1041b4440a7834cd223cebe31fe4f92147181d0b5ebfd9b6beddaca2526936d","first_seen":"2026-04-15T11:49:41.083741Z","last_seen":"2026-08-08T13:32:00.621411Z","times_seen":25,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xyfvvfyy.elementor.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 14:48:25 GMT\r\nexpires: Sun, 23 May 2027 14:48:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 11219\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-09T07:46:26.975209Z","times_seen":257933,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/cdn-cgi/challenge-platform/h/b/jsd/oneshot/1eec422858ff/0.17478439065953932:1779556084:x_3O-owP1eex1CfZNfCoH1uihPmDVyTvpMqeK-2CaD8/a005ee647f8556ab","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/1eec422858ff/0.17478439065953932:1779556084:x_3O-owP1eex1CfZNfCoH1uihPmDVyTvpMqeK-2CaD8/a005ee647f8556ab HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12208\r\nOrigin: https://xyfvvfyy.elementor.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12208,"data":"GwklmFzinOrLL2wnLW0inzO-0pk0f0al2ETln-03lXtnStBaI$04lGtFEB0d0hh0-$BH0$Qn7S0Otn8tKaykzXXaqk0q1100Oe0GPE3y0d$lnb2rfVG330dRoNZLCUg202cZu-n2xOkh2cXrQ0rqGET5allbhsAY2A2rH0RkzGOmkkhZFwpTWBpTO0-NasXXHnEl0N1FwyAkGTKK1rGGQ0+vR0mQzZWfL0$+V73J0d9PuFTUk15LqDTmQ0+qk0rC-B8I+NfIt0dYVNuJRZ0l0a1lLQt300xNCRx3zNeT0Kblh3eEwNpqQ0ZqktzwNrOchfZCwIae0a2H1kfltQ0z8+YOzZlu-aU-mU20dec0b5iN20nmTp-j2h3Z20N3CskZJvFD+uh+ueNCzZZKxuWkESd8WOcpZZg5Q-2Itk0lJN19oSl08-9nR7BH7wOaef9pQhOhhLY7O6unBx4x20iqak00yZm4LmlRqF+WPT0+d5kBBvce2DcnlfiEKcJueuhp6-uE7Lo7ilzFee18WFGYGhPSknT4RYPZWzdGLI8CgCWd8cJ4ut0Va9Hq7vsqpj0jUiDgqRAp+3Un+Vs91Ue1tK+PUlXNaaYPzCPTockwvRQ-nxyHNmS5U2bV7a39JeaaC3zWgI--e-P4zgZ0oZcQsX1FhqcxYs9R0oyv-rsXtKHJIVCQDj81xfnC1Nr10uDF0pzNlzeubJ-sRrRSQa7F1zk17BuV+6sajTIdIP3RUKWm1i+kuFz8PobIWm4m-K3k7uQw69LzzB2Tcl0djOUk1mOzkGz2GOK21nI7ltdumup-05YSZwKl98lcz99Rw9+btrF7d7S1Xzkv8Fbet05-tDzerC5vwkQ6a7rez872k5lZzkNrOXQXz2-ptTz-px0ZaQ3nx-2Nrn-0FvFOkQl$bSBYi-06-FGnmvkF$krqbn$zFmaHN7z2tromHRlW2nrB$VB1kIxTRFcXptz1daRv0FiT+crQ$z7zpixNO5NzCTcl7wGOQlHZpR8gq5QxoUkxN5XOTTqiBIzrxOOKYVl7eBFe$0pblvZenN29h$NimqTLx+aztQebe2x+9-anNoTG53i3ZUZ7rTxnckn9aVTiync0hqhAUnG0IxeS3DnG9WeXgQp0kwpOatr41RiZkBkI0e-T2YLzaK-DXrFXkuYuG7GOpdQ51y0H0isxOm-3zB0F$lWnQbCw1qEd0LnNOpKqQ5iaT3zlGnA-Hftazue59zu3TTGlZeEdFdZoXZeTOLk6m6FEmp2h2nHTl1uky2Uotfgw-tCOQwLjQz-01etv0E364pzQ30cXzl0igWs-03rbaapvc2Fv8+0$ST9G$clQ9aUmbTazY+kqHk4qa24labrfCCcXrnXkt09-hYfw0cNnzbPyz7nWV57mF0Oe-9k0NqE387nr8YTFLjLl0m0TBmlzg2OQTl4pmSzWRt8YqktVpr5Kj4-EXYiLz2LswnrDr+0tbvmjxn8RcL-DVPS-Hp61-oW9CFl1YTLT5CPc09yqKelrWhQKuAoHUCzgs1-tYoRSDmo7zP-2XjKfD70TzAoinC7eknOz4HynTZe-0nLPRlaAvA6j+7SEN0RXyJwr+WrL2l-4Rt2zsrQ-2GQx920JQ0lPb6YtX+Pzh8gfvlBOSNL0zcXz3nLqOXpzTV3cr-5QXTLlP0+a7-RNgrd5NtQ+n2X5G7rB7w$po9T88vH9rnaC-TrWS0OuvmZ8Z4k30CrQOzOtLT-LyrzT$PSZuNlDri-cLHIvyCrj4-L4CqiR8K-lhvgwoCCeI$+2R+60ZHRlBde3-tNQh3aFaai1jX0LZwq3GQm2sZZkewJk3ZTscYeGw$O1XpITy0ihJZ02eDZ$zv7eXudQHpD3+kSCy9nxZnTF7Na2nLO0ZHoU5kWGBX0ZpJTp0UhTkZiZ1UEQWO2IZFWQzizzLq01OWw7azZOEx1IBF010-+tWRGG7rn2OFEdSIgx1wadGtGR-isRdTW8N1cDTn0a-qFRg$7WI06bfIBo$L$I$gasW0Z2jteTpr30OXURlDYP+cgel0pckzTneFB18WYaGJaqlFx3OnKVvQNjBhvS4teE9pX830R-km+GiF7S-GaFv8on1r7B1X4VJDOBE7z$8q47OvyzkhoRF3ck8jJBzdhXIJYqiY0SunWzeh10z+fv1cHfc9OwJ5l3+YW9cnoLp1xh6OVLatZdBD9COSJyta8oGxO3dZUf7necW2+tgWlNrvP$R9umTklbCiqIGwTp9hV54P5pOk-CJ9Lmn-zqJHY$kccrGp$TB1NkOHP0SNYnsIJp8EYdzXuEw2VkB8dhBiBE58tQTPv9vEGK1QnIQBI1g2vvtUPGQdU+7R8EncbX6+lcSzNepQFz-HwhCtK7RfVBiNk8lxOg$N1UgiNIF-+Ex7clG8IULn7T+ucIc0NRBShOFWjn8ngg83r20AC1FIY0nkTEmzOuHCqTpf4Rl++abtV$VJTnhxVkYIUd+nZNb0c6eFUE5lSZ+-PAffSG03Uk5f$E22NvUlNT9hvl4TUvte52kL1lpyUfwrKTEO0Ltots52nI60$uwN7zL-Td1mv9a2zKT1YFtzy8oeJ8-680Y0Y06KU3g-5eJN4Zu$ChfjGRK0ScT0338PLH4kz$aQYw4bkaUZ49DJJl532QmzF6GebncIRjkN2bE$8HpztW9wIdhwA78b384a0oh21jONJZzwZE47zyPVo2HbKk3gi-BaFnBTnkdjleUJZ2$0-aWdpk7j$Cuc0b08-eeiQnqKbinkS3+8c1Ql72NQtEwT2lHTxgBS82io5Nx0cGE6A3tiPSY9rE9-u79U+a34CTT2-Q85RJc-mQ9$temOl-44eNl3TXBEV1R5V562X8pVAUvHshoZeGOcnehls9icH34lRiwQvZ012wt2rmtfF9uUQuybUziFwLamcdagLOkKm-21QAqNLlTW0z2t+PuyKzc-BwEBJzTq8Hm31H6ccm57D6qtESNnRBWH+2mydQZlcOQvIwLGGt0T$cnFOQX0ooPBSqSIyAmGzbB8VNTasbr9eh5kUxY9bH75rDQ3ckaUU887zpLQ+WZxbONOwWa3sQzKHSjct9pX0Zq895SL1CRYbp1hWRm0cd2x5$+dC2EgYhQm39YX$qppS+oUV6-222KcUd+OzgyIO85hvc-BLztyeTfeUN1KZg-F3jhJ2lfN4zLJ-b19P1u3EZl2hP6A7thGHyY7cB-zR1soot71G7aWHRz7hOLgHLahXUJ0vYA0l+jupTvSTnEte-JFWVTapAzn8kuY8lm02dc+7K7yCyOaj-ySJq17XiRPPytbvNg-nF2bsif72Vlpjx6iiLh0DkTFVljiyhaqD$IIROC4TSz9N5fYeJL9$mKIxeSOPxKSzpDK63FYpTW7BVO-5Lk2-xpgN-zGf0r0RRZ53-HQHFF22GLYE66PaSp96rkF6Px6nOgSs6ZgtXAZpSrrnhT1CrbYmmIFmSp7t1C-scQnjrUl1SfrNBJl6hC9vcbheJSrZ9G7T2YXkzTZnZZLaOSL88N6prNcx1HdHm868JT3eB5gvZzF0TE-G95cGZWgW9aZO1GzxGwgpZP-NhX1zgpzH2Dl51o2t80g0iX6n1wnQay8-S9Sv7Fm1617QJTzF8kcjFEdjLL2TrVa2bwZnabPyZx9cBFlRXQZyOaaQ3d6Z68gltkVmZ0IK9TTltJFR7GhX9R+pZLgObh05ltNozIh9ShJqnFaK9k8Zmr62BaaVrbl+Z+gCdUrbPnOOhQ1hkEYAYqbAgY8dPf9J-eRY61JsFtSy2Frml61bgegXLjhw$4SbFlinJtITW62TkRAn2JBel7G2t9Sb9e$olL3ULCzBrqaQ0T1ONLBBNJB3Sfawqw$f6wW0dQP1ORYzh1YWGeUmYtqEZSdHX39amQYu8H-g8OADmPLj1jGQ-DgKg-hDli8vFg1whngOrXJ$9X7NGnOQbaYqGh7b62lc0vPi3d6pORkyYlqh9TzhJKFC1SRj7L+p2NJn48F-Jx0kgtkDgJk9-PFagn0j1GRELLntX2LnLl3XghObSvAHhQhna5RE9dRezlbH3DRtknVGl5-Taweana1Gcb9XSy1i2Q0RXYZocb9chC05ZqnixcBH9nniee7xS6k1WgLeh6ak-0qCz0VmbygN21U1eTzTzAzHTmgnne3ka1OnJQ65BkZQgQYy-5J1t50e+Rkn-mOah$F1z9aQ2QzHdpBQLnR1YSbJOTqf-+JZYzh6hQr6FC-Gh1hnqvA2h12220xnObPQPSmh0TZrFtnGOkdQ8i2gL-+TXpWxhTzEBnbKZqZxBeJQLHaTXJcH+GnuNWqGJ-IOtn77tcqzPpaQbTX7q4Pv7kt1$SYx-3RnGa24SH14LnabSynrk-+00x1RXAdf3SRwNOPX7W3ZZdWErbcchQ19cv6pzl9nzgh-$LP2GqlDgZafe7cFtFteaHbhGa0s4nlZPRIJlB4Ll5lqgK773KP3LkcHPH-GSF7kdf31ez$lxn1OI0tFz5RtaFNTRn0TrD9-JenlTQT3RzIBq9c0ezqW-QzS1CnptzeDFDY34abp$jziJ+IrY+N6b+qrRSIU1qktzIh1L4atOCdUrJhQ7tqe4VX4rGdSNzxxYzVLxLJJ6AOucy6LApXZVTmQ2tkUILRvT61rJGOydnIkxP1ozXh5zZXpUJTLrxzkTGaktVrxrdiWF0a1GTby-Ei0VcFQnD6Zir8ePOxTXd$F3eFA7jhYrOJAlK260EWlAp+74RlFZ9OZFiNNRGz74OhTILR7tEczBFm$rQ2Er9gN2YPpOHnL-tGxcEBWSuLDR2rkVfxrJEO$ioOnlhhf8yB6GI75IEYtYE00AEtileX39lXb908JAnkXYnUR7tkiVw4nZAbhb-Jt4BRE9E$79U3-l+nW02aQ2CcR-l37Pm-GBG4fh1nLz9b89a2OA2ReZT-8UrBSW-lVz2aXOuljm-Um8hBnUVPlrh+NrSFWTDbHker2Fh0Tap477GgBXeOQZCWhn5tW7a15lBmCIn+pmASc4aILYZiLtzeeSfWz8h$vxCVq18a2OFTEqx1XFjZhTyA2Ug0GSy$P0i7+7W6pWgkk0GFaIsU4$nZP1OUdkABtmrN1hOaE6axBL5P1Uarp3elcne-cLCN0SbzeFq+ZWvqEO5e37Y1HRd7adrtamBrEzk0hno7fFjBT1AhYGENj7gN2ijNwV7TV$TlndO6KSde1N4qxa1PFJPdCW3N1Ja$L$VYbB4lRktnSNqiO3XB0qZPT-kaO0Ldotea3agqoIU1$LsSUzW4xaX2U3ztERezBtCVe+Y1QrOILFIxLRE7O1zSzBTnk3+A6S-IO4taOijLuFKzHGGVQBCmjzItg$$Fu9FLvxTAp+GlOYKka9BteZ7FzgIJtWYVmYYN1xFT8qhL5h2maxT-CFibPh-qmb8UUIsJkcXznWj+j3H1hI-gKX16DltX1Bj3p7NiCOqO2$TFgnc$xgx862mJ7WblhqeOoZPB$aG6jTBZuGuavTFIn7F0lqTG-9x-oktXAm2IJRXFBet+ue0VynV4H2eIuN+FFW3e135lFOuIg9-RDqVYZL5lKRW9gI-in9xIYOLbK0rU4VToC0ck9+3qbhnURGTLarEN1Z9GLlnXhkKGI9HkLghdDhX-i4IlpIKmKPpqF$qzjqk+trFhkpVrTORW5i59dxTmrt17NO1YP-Fqh0YRzI9YnUnNXGpGpbHnJJPZxRKTqrlgr-Rk2pP6VBz4nZWqnkE9cJoTRan7odpFiUzFWb2P-aRHAW01beCGK9kCkz9dy0n9tTB1ibzL4hwewHH-Fn1YVWn4whXdfIHTOOdI0jY$P$TBelxVq+-AqeqeyWyWL7xie2tnt2JJ$4yS-UkD0YT3N+G4ocDhfBsJ9Jfgf67N+3rLZ4r89ZX-GBYFYFtSN9cLresFiT+qI+NdOHt1tk$Ac4yPh2QXntCeeYW04tz3N16aTZ4zOzwNX+YZPZtx0RnJtA9xkp+tekZRV7SJfqBIyZxJK4I7R$CktAtdxnfTQ$TOQenr7RTLRZm2X2aNh0acwE-Nuix4$PSrCnHK$gwnrRzekIvdAtaGQOttmtnFKA26DP3W3thxtNY2anhGa-Rp12L+ZUaPyZL+hlTokoiuRmiEOsdNYikZb4tXEAz$yeqWm+gzgXz3E4IgKVK$q1FfG9ptWRCeYP-2nQ57t0lCTn6e9OUAU+UiCqNNvDxqzPvwCiuhTfVTa+SF9rbnpfSJkRK952t-GLucxx37XgcCiPcfmW37JNxtrlE4Ugp-G8clLBLck1OvhiCZh1S9+Aey9Pyb5cUh0TUUytx9TWg-HzH-QUkEemCOuNPFU+9A27efpnaNVSExK$-+eixqkCx+y+UxI+p-37N-cqCFscpWOufF7gLpZNr6+qWkPBiLf$-qZi0QqA+yQtK9iUD3xFNSXZqdDiUY41k1totajelIqUkz2GPRELcqT1K6EIPgnzfgq95nQZPPCrT5CnHa5V8Rn1V46eFzRK7CHGHSbAWUxAWvP3evQnwmfV+wHBOa2rEkF-rTd6wOPI-wWSw42HETDltbioljlEjXlDA1Z8vY5B7qmht2LGt0r$xSQwW69eQKSHUlOuJhye7CgdmAzsxNx-dijN1Fmik274q9J2nL7LRlabLIGlXtmVExT1H7+HRN1kPlamFWUlHgAecDipz++UkAEIALf67pSpJ8f8tZxSFBTZk7KkLOtQkev7UtuTnW38vckEL6JEbbse7Ifb8JpragUtFniivDtuQRIyIy8o6nN3egOoH+jrV4wHp5ht$+181SBsRwLSTVzftE$B9xUqmVYgLBJ9yT7HDN33ogTLn-XlRb64pQBOvguSYmBGIV47N0$iJ7njOuG$uaBoeat15jW$T9cio2IUDL8IGcdXuDzeqFq71j6iCf8TcqIxvYgVO6O6+97uOyWm-WRb67$saWhrbgOHnl1sWYamJx-cqnimyan5339VHOBLxtbW1JaVJBJtztaiJpnKoLdldleflxHkx0B0nL$-ZqkCZ3ISf+t0kyVnYlaagdUu2qSXNA1STenwCNV322kfamwf$7kObPIf7DBVBbIDATFFjbc6uHGLHc83ejtx4oR7HdIQqQpc-NRqeLx3E8krTsYq1hWoF-CjCoK-qC$EqDIunfFrUCHnQ9x+R-ZeFOEaJam5xg9$GQB0o+R0t4EJuUzqtD6cd1xigHq7ItaFFh2w+YRxn2JBxgCk8YgZ1w1agO2RFkXT98CIfzlnEoNAFs43B-G6fxmOctR-cIylP6A0c02-R0y0ab6WCv+5JyoYJvaGNeRR$HiPS7j5TawWdP50RpRKhnRHnOIph3Hb5Ld$IHkJShIWf+f+SFuExSfT$7NbnSNzpo2ySJ2u-sO7p5X2OFO7Sg8WroNmTN1ApWq$KKKQjv0dYeO1coEEDPEyp833dPastTcawNXC-6uIlWLtebplmpvp6NyWq+7tZBPyn6Goe9$CLfR2p+kUNA2BP$EmTx13219jH2+Bc1O4bO4DtqdkBOJZGP0nr4-ni+nrozGu3b21dNFS1-Zknne30$-pOnozhdKL09SwQ3kIB2WrdUC2VrOnagQLKxt3zt-SRHZkUpqnm9a8uVPk-zZa-$ZlvS0gNf+Z1NfYxf9u8wolVQnlXn+c8jzaer--JbK09C9iol7e0KgorOzj0FtWj$hgQvVvw0oltQ0r-0-Sm+zcBnlKt-knsYUpptO-3Tq$58FgewFcl81rkGvnYkokL$3TGS3dyunCw1FUQZkYpYfTH0Jrn+SRGfz+CmlOZa074yzn$TzBQlmca3eOzTp1TwTEGZ2ker3nRUSkARb2mauFE28un21m2O9rCr3ixeI-zWrgY3EbOtk2RxS5WbarQW2Balt3WbTBNv8GTQUzvBPCGrvOjpGRkpXzrGnOzpUV0$jaQ2QtQTEOkH7pGfzc0Ult0it3em-ygnKR8DWizeZK3qawWE+ItVI+7nFzEcLo2OzeGTV03p-YartUkapE3J9Wf8Xtipmd2sTm8aIGkxBkvbgZ28STBOZ$bHPhnUWakNF-X7iWj0A8mLxwzHGfzO380OXU9zW-uWE3FR9pekVL-ZFjkt388tkNkkJ0kF+SbpTQR53JwSTp3n7r2NpOOZWwH3FzZ2Nobu0yi9p$e2BtFOCaATLiAQJ1bPr2riNJlakOtnQ7SEhrQTFLtR$ar0JZQ2RtkZB3F873nY4lKWafZ+Fn0t5f3xTZD2y-havw8LBwWe3ClSz7teIBkvTTZC$E6kQ36Oi0xLXtCEwbk5OmUm-p9rRYLRE$b$rWZPywrItZ$km-2Gv0fFmdake2tq5d2W0kfakZTVr-ob+rk3vUip+p2g28liRyQLO3-G4-oZgSrv4kiIWR0PzfiHlJtTEzBZl0pCtt7t$7GL8wEiCpqiRA7mEFhpFCWDO20WhKzD3ZQK0-Lxnd7ndr5nz0W21RbwYNnd8s1-KOiZu24re84AX0nNpYa+GO+ktq1ZrKQyYrT3x3GLqS9a2+zceCEb+7vmPai0-CLwc2Xu1j3ChdkPtPi$d-70gToCVtFBzSrLmrkzRCTldzx7m-j0OwPEz2dOXfV8OH0ItYvzCrc2bJDkprtRW3FVqFYh0N0NlOorB$dT0ftkknWz1wzTpHcbQxCZd0y8n4J89UdnxHmerkGlfmlViiIZ73tWUwtkzcbh+y8V2Seut22nsr2zwzs0$lNLIYCej-3Ed2TLQG9lvvRQJwSWdrOCrnr+0pil+4F+4z3FSJ4k7EtT0ZGQzu30lwBB02iNvP-k1BLBjx9KnEE7oVtQv32-Qx1UOede-PihP1mBrLoKi$lGwmuqQrbHYvoOT69ezxU5Bo7neNFxm8-vloy0jsbw1RbhqpQmUsmXQk$7OC0QKOrBVpVl+RaRaTTzaW81Ck3kdnOR8mkTZerRh7000e6p0Enirb0p6+oOU9wnfFupeFzf90ee$F0z2cKTv6q0I3aQazST3Cbt9H-j8vi0ewEXRGSTklpzslfOSspxaGWunfmZllPFwTfrolzj3g6Fyfrh0u7Tk-TXR1pYVwN0sZAQTFa9u+gqzSQVX1Q0-9pqPUBwW1VfG-bZRHdktUuJaKsj4rc0JEqpTETJnLQklwRs2Gxbq288fJbjTn3tr+BelvewRyyZEbabXz3U-ptD8W2$l2zItwRsLNOlsB-J+Imnruq$e$V4nlTnk2u9+OxqUHQT0eXeNNmIBB$C32k12zfO9zdTq2vbqixn1t0zTzBCOwRASGeryFKJyBaXhqkJnByBTrOoOm-2plpBySHQ21G8pH0+zSlUd1XGWXHaw210jtSrhXrzrHz5RklaeW-r-z1FJlaTqpAtrc$+lU0YQNwzel8TDWqRul4OO5q2l5FUwrB$wOGku0kBq$Hxx7kJ+svONm$QpufV8pJFe0z$JenvZkm+Uw0bk$B1I0E2OY-3K$UpatGGGntlz6$1wYQOQrFPSv-teiheYbZtndna0Zl0kds5OwdTqlfU-di48gl$v68xLPCZn8uWiWtEGTIsz9Z8F$yDLOiFslxGenO0TESiPu2d949gFQRgtLdiKXV9HpuETu$1OHNjB$02w6LPSttbpEzhdEjtDWbxGwl$tcEyBcZzErC$9iRBjsaItE2zqHoK$alUdTxkLz-Cj0jLcV0RzRbsebkCHlh-ROj9by9RjLD+9AGdEhTgEziD+7Nn0C8BPtrHgTdXkW0dTdlXEesIjXDhFz2TCLElO0JvlO$cRAHKxLI10+uoNt9iFziXXleDhVEzi5F18WnQd3E0pi4fAkzDmwmwEziJdNABj9I32pGS4fikX99Tm70JAxsATgz8p1Glep0SUQc5yPyvIsfWcry-dQ10KlEfnfA952zkGK$knll7hejheWDpjnY2PT62N+ClnxngAnjb2xew-CjLs-Uk-I8U2uakbUY0F0eetmCeDEi3AlZD97mV3jOtC$KmplYQmpdnYe$PaYhOCHayFuQk0JkeI16tViZC$izSTZCKa0W5dtQJEl81eaKFBZU0Jb981yODiS8W9e+TsmV2-IasAE-We8mehRP0S+OnhBvF8lgF7z$pbvevvg8mlqSkbkqbi3Kifn6SGeROrPv+0gf1q2R+2xGmhvCv1fzXZqtXJR-PFl0TxZRjbZR-YWP3iNx$8IQyE77XJ$q2LetmHnbGzJ3KkilFvnn9caJTE2z-6OtOcvC$3LLuxymdEUvhfOORR1Py5E5lWJTxmknhzP0KBxv0xdPF9kSpoi38iHPNTTJjEzip2TTn1x2EEw5YnkXHgvRUpuaR1L1ai61QdTc0LT3-$KkiYQciateNLe6f3xxWl$g0H8qebpuxnbkpQkXZqzhCiwSaqBS83n7ZNQ8fCRlThxVG8m2EqSjLHIkhFqwdTROdpZhWDyrl$CjkATX12mkdh-3IaAQDaTE+bC63VatkidWHLsBWTAlX2WwN1Pj8K1q2zbqvankNNDnIkA232aDK30qnfaVQCvGmkCcWP4lALB5eOn8eWyyNei9CUgmGxsmwhFrU53W2y2hGIJzfO5eyOIU-RK3h0BO02bQy0RcCXFhbF-gfnh1OU2Us+4mONB-0k5rBWlZj1GesvKN-Hld$dnqepzlEdioG3HS70jyUE3cfde9Xq+hcNW1iflawbmx423NK2XGN7RVxs3u561SNUj-qyhcvEEUvSx+Jjxucq$riCgeUPVBAp35TuO$efgbeCmp5Ru8ZVdcbW3mC5-TkEecc9hgQ55LHv7kucLzmvS2ikFET1cNNBJ9E3cRgTdPZYXEE2zuglOFFHN-cmENnJgqAkK+fP6h3c5s+bn-wAPbEcl4sUIcNxu5N5gcFzAIcNeT1$5qUFzAdclfQ1lhL-9HRl60pkm8Cv-gzUsg+Ntmp5SnCNVURkN7RYN$UJgUTcBN1c1aRHb8BfJRNoccGHYnoV5rBZGcdauUY8$dcGxim7SAn9iRk6KmrrVN2FRoACR1nW1C5Wc73VgWtKv1UGj-J3NWJtfc1m5D+Z38K1NxUm4atwJNTtPFQjPfkB7eYeZggb0UYd5FYd4ZgefZJZ1oUSZWwgcxtUAat-6rqw6T+2UAainwYqwcTfdUkhc-Py+$BlpSUThO-R5eBSLK+zLhcw9oTaanfsJs32+ErWeLgxh145IWCm3ea4NGcdhiHfy3hS+eKPOghOV$Ag1NxEVft377$WOSKx$UYN$vp$WJgge5V1tevoGT5g1K41m5ZvlE3hYt51cdgZ+P$+pgjaj110uv6PNpStYgVohm+FEI76W56nf15lmHAc6BrH3J84wEVxJ7E22Jza5dAykQrkNllP0XWxVxyh2fj0GQyQzB3WbV+72k0utWRkHa1xCPD1rw6VGO-QJj0xRD0tD9IC52nP3J8i0l64CnbunbkSjGuUhRq+DUw3LURk2oJ3avV2ZDVXh3v6qrIzaBQlW000bJO4gnAlnHzIrH0a0nlnei7hElHYU0ulOWrE0D$+lS07taHnl9eluZblfFrWd7-xT+0rLYQr9ttB2YJl$1dUl00TPze0at0B2lBIzjzDk2lIihUrnuS27Rr2ntISZ3rXzt8uB1cVtYKz1juCuSK02lafnUzz400n7nzXl00hZmSN5izfFjN4Obt-t0tTP4YlL0-WYh540a47dlKeVSGpduUzQlTxAF2af98r400VBapduB2wIhtabLa5UQt05RNpkV6Gfnu0OuO1lZYRQnUzqQfIjXtmgBqqzrk1Qqb402qf-uP4XEklOX-FqJlpoP0nFxR0spz0YOS54O0t00npGkGkePctz-0lNIwG6iQ2jKozL0NBb6tncS8+8B540zlmK6tzTTFnBwTutQdpbvlPTu1dDajKO3T3jkbwQ10-9qr18tQjIsFa82yh5aGt3RHRNXxFnxWREnEmC050VYJ8f57djQ-p-GljjAdUkW0hUaCKwjn4CdcOtFrZ5UT144RUuli0Lz+8PlxswnNQFgnU0B07IupZ9S2lN8loL0W0nl2l0FTjTqO6r05niYeYpQ21q93GO6beFRkwZeHLWXk7C0krkpTQOQ2kOrji0ZB9lzXYg0ibXNhedljlrgnqr5NSp4-3QXq00zF$AqlWlY9Vqf4ONbT4QCKtjDozdR9Wqgavlbh0tvqbUw03Tkz34bwN01lzpOkJalDTtkOZrGKtjczKW22eBYgnRQC06F-w00aHxrT00"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:24 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: zT5UEv6AXjIisUJAunHmKw==$Np4k5Wv9rWKvV01+gk81HQ==\r\ntiming-allow-origin: https://xyfvvfyy.elementor.cloud\r\nset-cookie: cf_clearance=_sHLdlU6u7EUuwZR0M_5bVkISK3tQkVmNU3DPMhMLLI-1779558924-1.2.1.1-XmxGK9c0HYdkVPGD9SuD1OTl_3LFmWVRA_QmJ1yB42pQMVyR5pjKU7bHB1y4nVB8.g1.9Ca.SesAGTLKx_MYf5_diIuD8s3rKoPKmvMfitVsVMIqTNUMZtgcU_U40Bt6O0gqAGUKL6pVdy6FlhV3cNcOGY2MiHwCCVylbN.YkMLLooNpJNNgVC4QGAghEljqsgOPekZUToEZECW9A4PyWgrpJKbnoh2s6Ouls8PAlEMBS1_plUx1EFcq5Mh9zOzGWACyMxS5eH2KzxyQGW_SuMbIcX8F6eIzSExvVB1ev4fYk5sniMi2uRS5FbFs_bM3zLSggk2HGs4qI0.vo46PjQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=xyfvvfyy.elementor.cloud; Expires=Sun, 23 May 2027 17:55:24 GMT\n__cf_bm=kPiFiIJ.dK9kgo8_O8PHHn8Qs3khCm5Y41IMunBGpo4-1779558924.6244128-1.0.1.1-4fL.XLWQG4gKkD3yoJkLLPR4k87yJCZmYDM7jQ_EyHk7ItUTCQXwv7oCFcBhr7c6BIuiTRQj9e7IcqaClhojYgCCUvLywh1e7iJvWMlv2l.HBDTq0O51R1qJbCBTft6b; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:24 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a005ee6eebbb56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2Ffiles%2Ffonts%2FDelivery_W_Rg.woff","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:24.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2Ffiles%2Ffonts%2FDelivery_W_Rg.woff HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//login_page.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=_sHLdlU6u7EUuwZR0M_5bVkISK3tQkVmNU3DPMhMLLI-1779558924-1.2.1.1-XmxGK9c0HYdkVPGD9SuD1OTl_3LFmWVRA_QmJ1yB42pQMVyR5pjKU7bHB1y4nVB8.g1.9Ca.SesAGTLKx_MYf5_diIuD8s3rKoPKmvMfitVsVMIqTNUMZtgcU_U40Bt6O0gqAGUKL6pVdy6FlhV3cNcOGY2MiHwCCVylbN.YkMLLooNpJNNgVC4QGAghEljqsgOPekZUToEZECW9A4PyWgrpJKbnoh2s6Ouls8PAlEMBS1_plUx1EFcq5Mh9zOzGWACyMxS5eH2KzxyQGW_SuMbIcX8F6eIzSExvVB1ev4fYk5sniMi2uRS5FbFs_bM3zLSggk2HGs4qI0.vo46PjQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 23 May 2026 17:55:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a005ee701d0b56a9-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nlink: \u003chttps://xyfvvfyy.elementor.cloud/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-cache-control: public, max-age=300, s-maxage=604800\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: status not ok\r\nec-cdn-supported: 1\r\nec-coldstart: \r\nec-source: dynamic\r\ntraceparent: 00-a005ee701d0b56a90000001779558924-a005ee701d0b56a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=cnV6tzUHhBqadmTW3JcDLLjuMquc92KoyWWdiMPvH1c-1779558924.8147054-1.0.1.1-PhSIHR15LNISQWCEV85lQZJKre_tckp0.LFX_Tg9FbFW_VOwQrVrgfEJSdPB8foasg.Sny6x5YUg1vawixegrRRCuPAk0ByarsP.vhHC6B9OiRCFAbAiMg7rs1LuTyXU; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:25 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor:4.0.9","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22783,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11055)","md5":"a632fe47cc87557c8bd3d929991e5978","sha1":"f54ac5adfef4459048d14daffed6305a73079feb","sha256":"d2ebe8c247df0559d6243c241ce907d8802df4b3466fd223c1847ddf6239aee8","sha512":"326a7c6d42a6e98954b0cce49e1616f16f64692444671c1a86900b91f8f5bc9bd3e58e6dee20f183781b2b6d55da991d6ab7840e7f362c758b8734e33757f5a3","ssdeep":"384:Molr/ZdSZUaAIkWZxEH3yZh4Wc4Z2TBd92pkgojzuLE0sl9SL:FxZdypjsIkgo/uo0sCL","tlshash":"6fa2c772f1ba00677b5f87aac1a2731de95c99319e02a776b1f8301888a4df711f361d","first_seen":"2026-05-23T17:55:50.945732Z","last_seen":"2026-05-23T17:55:50.945732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//files/fonts/Delivery_W_Rg.woff","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:25.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//files/fonts/Delivery_W_Rg.woff HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//uikit.almost-flat.min.css\r\nCookie: cf_clearance=_sHLdlU6u7EUuwZR0M_5bVkISK3tQkVmNU3DPMhMLLI-1779558924-1.2.1.1-XmxGK9c0HYdkVPGD9SuD1OTl_3LFmWVRA_QmJ1yB42pQMVyR5pjKU7bHB1y4nVB8.g1.9Ca.SesAGTLKx_MYf5_diIuD8s3rKoPKmvMfitVsVMIqTNUMZtgcU_U40Bt6O0gqAGUKL6pVdy6FlhV3cNcOGY2MiHwCCVylbN.YkMLLooNpJNNgVC4QGAghEljqsgOPekZUToEZECW9A4PyWgrpJKbnoh2s6Ouls8PAlEMBS1_plUx1EFcq5Mh9zOzGWACyMxS5eH2KzxyQGW_SuMbIcX8F6eIzSExvVB1ev4fYk5sniMi2uRS5FbFs_bM3zLSggk2HGs4qI0.vo46PjQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 23 May 2026 17:55:25 GMT\r\ncontent-type: text/html\r\nlocation: /index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2F%2Ffiles%2Ffonts%2FDelivery_W_Rg.woff\r\ncf-ray: a005ee71f86256a9-OSL\r\ncf-cache-status: MISS\r\ncache-control: no-cache, no-store, must-revalidate\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\ntraceparent: 00-a005ee71f86256a90000001779558925-a005ee71f86256a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=bp6SGeDh5oMiNON_C_kuS5H0039iTJj2Md0cO4IIteo-1779558925.1164308-1.0.1.1-UIaLIUGUal2QH.lAIiQFXNvosexhQUAlAxyX8zGxz5KbMOXHlB.p8LAaSbnn_Q_hFmFDFbC4VgU2PtgPaK4X3cFAeLND3HOSBa5cwzHn3i5z42_0.tC6gRmG1K67xdt9; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:25 GMT\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":22783,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2F%2Ffiles%2Ffonts%2FDelivery_W_Rg.woff","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:25.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2F%2Ffiles%2Ffonts%2FDelivery_W_Rg.woff HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//uikit.almost-flat.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=_sHLdlU6u7EUuwZR0M_5bVkISK3tQkVmNU3DPMhMLLI-1779558924-1.2.1.1-XmxGK9c0HYdkVPGD9SuD1OTl_3LFmWVRA_QmJ1yB42pQMVyR5pjKU7bHB1y4nVB8.g1.9Ca.SesAGTLKx_MYf5_diIuD8s3rKoPKmvMfitVsVMIqTNUMZtgcU_U40Bt6O0gqAGUKL6pVdy6FlhV3cNcOGY2MiHwCCVylbN.YkMLLooNpJNNgVC4QGAghEljqsgOPekZUToEZECW9A4PyWgrpJKbnoh2s6Ouls8PAlEMBS1_plUx1EFcq5Mh9zOzGWACyMxS5eH2KzxyQGW_SuMbIcX8F6eIzSExvVB1ev4fYk5sniMi2uRS5FbFs_bM3zLSggk2HGs4qI0.vo46PjQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 23 May 2026 17:55:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1/files/fonts/Delivery_W_Rg.woff\r\ncf-ray: a005ee72b9d056a9-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nx-redirect-by: WordPress\r\nec-cdn-cache-control: public, max-age=300, s-maxage=604800\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: status not ok\r\nec-cdn-supported: 1\r\nec-coldstart: \r\nec-source: dynamic\r\ntraceparent: 00-a005ee72b9d056a90000001779558925-a005ee72b9d056a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=9D.MFCk_eo5TyDrlV5qsvQP1VheIOwb7njJcFmIOOG4-1779558925.2364135-1.0.1.1-QDdwYBtfz2xAXozaISd8z446h6YznMg4r96H22dlD_GvX8SLFW.nhk1RTPpIMOfIxGUyzKqu.4fpT97m6uscMw59SWfVCgB_ZUPk3AKmyA8DXLHdrjYJ0KnnoVZjZiAP; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:25 GMT\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22783,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/.cloud/rum/otel-rum-collector","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:25.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"POST /.cloud/rum/otel-rum-collector HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nContent-Type: application/json\r\nContent-Length: 2007\r\nOrigin: https://xyfvvfyy.elementor.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=_sHLdlU6u7EUuwZR0M_5bVkISK3tQkVmNU3DPMhMLLI-1779558924-1.2.1.1-XmxGK9c0HYdkVPGD9SuD1OTl_3LFmWVRA_QmJ1yB42pQMVyR5pjKU7bHB1y4nVB8.g1.9Ca.SesAGTLKx_MYf5_diIuD8s3rKoPKmvMfitVsVMIqTNUMZtgcU_U40Bt6O0gqAGUKL6pVdy6FlhV3cNcOGY2MiHwCCVylbN.YkMLLooNpJNNgVC4QGAghEljqsgOPekZUToEZECW9A4PyWgrpJKbnoh2s6Ouls8PAlEMBS1_plUx1EFcq5Mh9zOzGWACyMxS5eH2KzxyQGW_SuMbIcX8F6eIzSExvVB1ev4fYk5sniMi2uRS5FbFs_bM3zLSggk2HGs4qI0.vo46PjQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2007,"data":"{\"resourceSpans\":[{\"resource\":{\"attributes\":[{\"key\":\"service.name\",\"value\":{\"stringValue\":\"elementor-otel-rum\"}},{\"key\":\"telemetry.sdk.language\",\"value\":{\"stringValue\":\"webjs\"}},{\"key\":\"telemetry.sdk.name\",\"value\":{\"stringValue\":\"opentelemetry\"}},{\"key\":\"telemetry.sdk.version\",\"value\":{\"stringValue\":\"2.1.0\"}}],\"droppedAttributesCount\":0},\"scopeSpans\":[{\"scope\":{\"name\":\"@opentelemetry/instrumentation-document-load\",\"version\":\"0.50.0\"},\"spans\":[{\"traceId\":\"a005ee647f8556ab0000001779558922\",\"spanId\":\"d75ad1e22f459e63\",\"parentSpanId\":\"14a4c8ccbfcaf6be\",\"name\":\"documentFetch\",\"kind\":1,\"startTimeUnixNano\":\"1779558922922000000\",\"endTimeUnixNano\":\"1779558923068000000\",\"attributes\":[{\"key\":\"http.url\",\"value\":{\"stringValue\":\"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\"}},{\"key\":\"http.response_content_length\",\"value\":{\"intValue\":3678}},{\"key\":\"http.response_content_length_uncompressed\",\"value\":{\"intValue\":11930}}],\"droppedAttributesCount\":0,\"events\":[{\"attributes\":[],\"name\":\"fetchStart\",\"timeUnixNano\":\"1779558922922000000\",\"droppedAttributesCount\":0},{\"attributes\":[],\"name\":\"domainLookupStart\",\"timeUnixNano\":\"1779558922924000000\",\"droppedAttributesCount\":0},{\"attributes\":[],\"name\":\"domainLookupEnd\",\"timeUnixNano\":\"1779558922924000000\",\"droppedAttributesCount\":0},{\"attributes\":[],\"name\":\"connectStart\",\"timeUnixNano\":\"1779558922924000000\",\"droppedAttributesCount\":0},{\"attributes\":[],\"name\":\"secureConnectionStart\",\"timeUnixNano\":\"1779558922933000000\",\"droppedAttributesCount\":0},{\"attributes\":[],\"name\":\"connectEnd\",\"timeUnixNano\":\"1779558922954000000\",\"droppedAttributesCount\":0},{\"attributes\":[],\"name\":\"requestStart\",\"timeUnixNano\":\"1779558922955000000\",\"droppedAttributesCount\":0},{\"attributes\":[],\"name\":\"responseStart\",\"timeUnixNano\":\"1779558923068000000\",\"droppedAttributesCount\":0},{\"attributes\":[],\"name\":\"responseEnd\",\"timeUnixNano\":\"1779558923068000000\",\"droppedAttributesCount\":0}],\"droppedEventsCount\":0,\"status\":{\"code\":0},\"links\":[],\"droppedLinksCount\":0}]}]}]}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 17:55:25 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\nset-cookie: __cf_bm=z2WgEu_VCmXhV40y.lfaOeq_pMr02xug0_u.3.Ic1gw-1779558925.8902771-1.0.1.1-98WK96O.7u6yxMR3jqVYnLHmxtuFprHUVRkXVl9M.tInG31emxsx1e4wFJpVX9OILU2EH20JWgJqvZWDvIPNXZ7Hz2CgN.MOHLT0fqO1FyxeHOn2UdNpjSkPS_H7znUF; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:25 GMT\n_cfuvid=bTJriTURsLIrNCRw8zJ.IjtUCte0gvnscDdEQfXbt2Y-1779558925.8902771-1.0.1.1-XjofIeZ0XQ4rNNn2n9AC.pgmCSzsalhQslBC_LB30SM; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud\r\nstrict-transport-security: max-age=15552000\r\nvary: accept-encoding\r\nx-powered-by: Elementor Cloud\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a005ee76ce2a56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//webfont.js","fqdn":"xyfvvfyy.elementor.cloud","domain":"xyfvvfyy.elementor.cloud","tld":"elementor.cloud"},"ip":{"addr":"162.159.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html","date":"2026-05-23T17:55:23.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elementor.cloud","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 10:42:15 GMT","end":"Tue, 04 Aug 2026 10:42:14 GMT"},"fingerprint":{"sha1":"26:97:00:0C:B8:88:35:64:74:F0:44:45:CD:3A:F1:35:03:D7:CC:A3","sha256":"01:06:FF:F2:6A:E0:F3:24:B9:89:48:42:BF:31:AD:CF:8E:0C:09:2F:B0:BF:6B:CC:72:8F:53:62:AF:FA:6B:56"}}},"request":{"raw":"GET /HK986FR88/HKMSX02X1//webfont.js HTTP/1.1\r\nHost: xyfvvfyy.elementor.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 23 May 2026 17:55:23 GMT\r\ncontent-type: text/html\r\nlocation: /index.php?dynamic_asset=%2FHK986FR88%2FHKMSX02X1%2F%2Fwebfont.js\r\ncf-ray: a005ee6678f256a9-OSL\r\ncf-cache-status: MISS\r\ncache-control: no-cache, no-store, must-revalidate\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000\r\nvary: Accept-Encoding\r\nec-cdn-status: dynamic\r\nec-cdn-status-reason: static resource\r\ntraceparent: 00-a005ee6678f256a90000001779558923-a005ee6678f256a9-01\r\nx-powered-by: Elementor Cloud\r\nset-cookie: __cf_bm=p4D4116K9ub4X9144J2ToQQv0GAJVtHSeMu5Ojln6Xs-1779558923.2790442-1.0.1.1-o1cFQFNeLDCrFoneo6XwQ1WClko.K3cxFrl06vLVgobdnI0qkRpAgovGrTrnSM03oC7LaWq35kwCD.0TBK3v0vAZ3mM.OhyRDfpkAf7qmEFMtv6SQ4L6kHa.CiJYGJRd; HttpOnly; SameSite=None; Secure; Path=/; Domain=elementor.cloud; Expires=Sat, 23 May 2026 18:25:23 GMT\r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Elementor Cloud","description":"Elementor Cloud is a platform for creating and hosting WordPress websites with Elementor.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Hosting"]},{"name":"Elementor","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":23702,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"xyfvvfyy.elementor.cloud","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"xyfvvfyy.elementor.cloud","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shorta.vip/adbVw","fqdn":"shorta.vip","domain":"shorta.vip","tld":"vip"},"ip":{"addr":"172.67.155.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-23T17:55:22.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shorta.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 22:27:54 GMT","end":"Sun, 12 Jul 2026 23:26:35 GMT"},"fingerprint":{"sha1":"7C:B6:0E:E5:13:1B:7F:F6:97:5F:45:E4:71:5C:3A:F0:70:35:D0:EB","sha256":"05:99:98:44:B6:6C:31:06:F6:14:78:D0:9F:1F:0D:3F:EC:9F:FE:8B:2B:5E:F1:6D:16:D0:C2:3C:44:3B:26:44"}}},"request":{"raw":"GET /adbVw HTTP/1.1\r\nHost: shorta.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 23 May 2026 17:55:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://xyfvvfyy.elementor.cloud/HK986FR88/HKMSX02X1//index.html\r\ncf-ray: a005ee617ee20b4d-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=1a8e3d56fd7b27250e18fbfb5c17aa13; path=/\nshort_49818=1; expires=Sat, 23 May 2026 18:10:35 GMT; Max-Age=900; path=/; HttpOnly\r\npragma: no-cache\r\nx-robots-tag: noindex\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6byIfLwBiDdJ0oVVbm2S2iBrL0Ao%2B8PiU6YcNEbmrM9taDxVh2eoHqFO6tC26tKFi8GhXXZLPY%2Bx4Utbqg27xauDc13rMysH94wARXINPanwkpVVyZUVN9Lf0Bnj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":11930,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":42,"dns":17,"connect":1,"send":0,"wait":443,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"shorta.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"shorta.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"shorta.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}