{"report_id":"3f4d95e8-29c8-4ca9-a4f0-41c194107047","version":6,"status":"done","tags":[],"date":"2026-02-25T18:20:15Z","url":{"schema":"http","addr":"themilgroup.com","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"themilgroup.com/","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"title":"The Millennium Group Int'l","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T17:49:27.506193Z","times_seen":17746910,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"themilgroup.com","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-01T18:20:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":1,"received_data":8824,"sent_data":560,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-22T22:20:46.526035Z","alert_count":0,"request_count":1,"received_data":401018,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"themilgroup.com","ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2004-12-04","domain_rank":0,"first_seen":"2015-12-13T01:57:54Z","last_seen":"2026-02-25T01:45:03.59608Z","alert_count":200,"request_count":40,"received_data":2873287,"sent_data":21379,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"MonsterInsights:10.0.2","description":"MonsterInsights is the most popular Google Analytics plugin for WordPress.","website":"https://www.monsterinsights.com","common_platform_enumeration":"","icon":"MonsterInsights.png","categories":["WordPress plugins","Analytics"]}]},{"fqdn":"i0.wp.com","ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":841,"first_seen":"2013-09-17T06:14:42Z","last_seen":"2026-02-23T04:27:19.120676Z","alert_count":0,"request_count":19,"received_data":233221,"sent_data":9989,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":5,"received_data":115403,"sent_data":2741,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"themilgroup.com/","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e09f81f458e56f1ac6d30ad32e88f4b0","sha1":"541c980de8259746c1c6b07c6ca4c8bf244df43c","sha256":"31201261bde010d6a986feefecccac4499dd22b363fedcdf21132bd1a2cd749f","sha512":"641c7da413222f79b19b092aa99a866ae7830852069dc0028a7b66ad776288a612d90860a59a2801c96c6f28a2d49ec5a97c1b9fc06ebe0ee9e46396b9c05a4d","ssdeep":"96:1g7ovQFAu2sB99QzSIQZTqFlniaE6QHilfxaqzk6XnPoLSNp:14ylSczSIQg7m6dDaH6/oL8p","tlshash":"23d11fc0e7dd50974aa6318d4c3e29ece03c55b238045cb7fd48fa554566c2e824eb7b","size":6654,"data":"","first_seen":"2026-02-25T01:45:06.688398Z","last_seen":"2026-02-25T18:20:19.48687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2507a31ddb4db32a0fbaa1496a540bd","sha1":"587a731f31b9e7872a735ef4fa13add962cf49d8","sha256":"6b697ee3c5b264b4bdb9ee3e96432e58cc5563ba7d7d466c0103767cc3bb3362","sha512":"5424a92f9825d9aee94e373447cbf7679fb0a0ccf829237721c3e84f240570597c627db01053d53ad2903aa4fb48e1a0d1d26fa0842c9d0df0ce218b043ad50e","ssdeep":"","tlshash":"ed211d98bf947cb303e5e27531bfe705977a20b8f0844490344cd9e90db0e812623faa","size":1248,"data":"","first_seen":"2023-03-09T02:28:41Z","last_seen":"2026-07-27T18:21:38.218411Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3Pro/Slider/SliderType/Carousel/Assets/dist/ss-carousel.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca78f17eef310dba8939c5b4af46b405","sha1":"1582f53b1f65639eea395587c706ac4825e368dd","sha256":"fcbad912a7693f00c9e02d8fb766d075849b5dcf067c6655158b099aa3e8aee1","sha512":"c89fc4ab57751954bf4f71ccb0a53826793c8ca7f52d694937d3a741f8f2b885e403bbfe011993d99bc04dce6f512794e04ee0f89aa6d2b68415ee97ce1dfdd1","ssdeep":"384:jsfoE9wCw2WwZ+TUJjhTXJrrjfiVYb0g1xkmaXRfakDVn:PE0YEf","tlshash":"d6424354f6556a3242e252e35a0fc90cd7fa125cf440c06ef4d8e8da88f694d366ebf8","size":12964,"data":"","first_seen":"2023-03-07T12:43:10Z","last_seen":"2026-02-25T18:20:19.480451Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=1770262649","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","size":15525,"data":"","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-08-06T12:19:56.095154Z","times_seen":17731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"077e22c9b71f278b810bc23026ffd1a0","sha1":"eb6c6878f3990677c69c8cb6471977c463427caf","sha256":"f98cd3c4b9457469cbff9dfabd0c41d8a3356917442003e0d39d0591880924e8","sha512":"c8500e00cc589b69f3e0786af4689273e47f636664c5c290e6a668afff1743c0a25fd26043092dfc50fa7ade1050ed65c93411d31cd9918041716304ea7319fb","ssdeep":"1536:uhZidebAAggKHjdzSp5ql2V+MdW36n349YVHq5kkVnJYe:uvTWqnoAGJF","tlshash":"dc93f9cdb242b436028762b6457f060bb337a954740b4918f268e4dd3d7ca9d12bbf7a","size":91528,"data":"","first_seen":"2023-03-07T12:05:27Z","last_seen":"2026-08-04T13:55:09.456925Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3Pro/Application/Frontend/Assets/dist/particle.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d96fc6c7610cd3fe044053973e2682b1","sha1":"67662da9a5f79b21d62caed11965479344628d1d","sha256":"841bb87075c43e9664403e7ddf3255b1cc1aca1574246be0e6b75988e5787ed4","sha512":"6ee931160a674e9443bac2f65c0d3255b195add8bf592fc17d8c448f22ef675408ba9bd3df08e18f927bb7bf4a80be977b2100c41c7ebaa16f252ab193a05c37","ssdeep":"384:xfJ5Rc78ASLy5exvWGKeJRcifMCkCbmvdjL3mvpxmwOqZxVcFB:tTLygZMCbOhCvcmxVcFB","tlshash":"0bb2b61eb3fb3db337cab1b0d9ecc012c77054e5398695b1f9ac836c9559c82129a752","size":23393,"data":"","first_seen":"2023-03-09T21:59:29Z","last_seen":"2026-06-29T06:06:04.862915Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1e61eabb0c508a4034e9463f5c21415","sha1":"447d61fbd289f19c196dca6db57fdabf396f37ec","sha256":"14a0347940d8cd4bb00302adc1f0e7a52331a4e1453dbca140e5064622f4d1ce","sha512":"f0d5eb7750e9bd24c160562d63b62a3e8fa761d0e9e9dbdc522c1ea848868eb301bccad139ac58e713a32abe4c899064b7c179ac43ccf87eee0d9a1b23322426","ssdeep":"","tlshash":"1bb092b502e0952705ba055ba8a7e609646098216ab7b168811cc32c8872ac01da1bcd","size":119,"data":"","first_seen":"2026-01-06T15:13:01.552784Z","last_seen":"2026-08-01T16:39:58.116377Z","times_seen":10505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/astra-flexibility-js-after","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"270f9bda15af90ac8089beddbcb24c71","sha1":"981950bafa20054fd317d8433ac8ad9de95c6375","sha256":"2847fc68a1d5f39d1bde7b7f58f3bfe086ac0e90222595aa3aeec1b2db099b2b","sha512":"f06e2f61d078c6b568beb8f937d96720b8c78275eb3b52c0fd51b49f0a06c2b83b77ddbf6d02a4b48e395dd0e4970ee022ec129ebe7a5832f6ba0c8e2220543b","ssdeep":"","tlshash":"a7e092b5c2e0a52705bb097ba8e7e60964609821eab7b168811cc32c8872ac01da1bcd","size":382,"data":"","first_seen":"2026-01-29T21:57:23.117128Z","last_seen":"2026-05-18T13:13:35.050398Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/rocket_lazyload_css-js-extra","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5406898600fb9acc0dd5786d544db961","sha1":"0ef4443566aa577cb9dcab4379f0d0ec5ecfc75c","sha256":"3989fc11e87f67ef3f16b8ed8376ff3fc25443beb8a34862e15f18525d6b4d90","sha512":"dc67e612a968699353e9ee5ddf118a9af79fc7594c8398384e0ad25df32c74663078b631ac10dc491adccd07b2c3c9d1f2dc35500639f0a8e713e96fbf7b9deb","ssdeep":"","tlshash":"bc0112c1e0ac8b98fc761c30023041727045bd86d7315447e00c418c822250073a4113","size":775,"data":"","first_seen":"2026-02-25T01:45:06.69514Z","last_seen":"2026-02-25T18:20:19.489151Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/rocket_lazyload_css-js-after","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8e4b5d60b77c7ec4e9e46daf81963d4","sha1":"b0ebb76fae864e2977cf0edc376309ca033e7455","sha256":"4a9739e99b97d9d7fd98fd5228be2725e07d976d357588f6149964b5a1c187e3","sha512":"0011d873de99194549fc93626824c21162e161cad60923cd6deadc0cfdfc7091d9c83680e0834d4804b60c31b5e7abee3cf9a9c377c599135f9ac2a15038768a","ssdeep":"","tlshash":"cf4131a6f0fe70b7ba6f00b68037c286f430a63bfa4d4051e15d94ba2cb8c594453967","size":2438,"data":"","first_seen":"2026-02-25T01:45:06.703164Z","last_seen":"2026-02-25T18:20:19.490032Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"28ba831a91bbf6e316b6ab3021c091dc","sha1":"14d63b18f0d7969652e8d1822aa116932eafc2ee","sha256":"99352b9c4071713680bdf1f1cd398480aeae86771d1bfc21b6bc2ed666f60385","sha512":"2ed0a08d6e70e480e9e01d4cd440fef8f9e61ca068653f846bbbd9b3bdb19d0855c52008113b978c10535a6e3d58d6fc6640388228429ab0a38d564747c598ff","ssdeep":"","tlshash":"25e026a3e8cbcde9aa0c6bc62afd1cac859a10d796055406d58d6e5b41a03381204eee","size":333,"data":"","first_seen":"2025-10-01T07:54:37.315691Z","last_seen":"2026-02-25T18:20:19.490809Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=10.0.2","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d358e30e5cdd6d7e2d8238e5fbbd2360","sha1":"7b6f06c33cb8e2410bcaac47618a10d16b34ab90","sha256":"1a1ce284e0d2b19d90c1db2b4e710340e5f73f7cc78619cd964828a2818d548c","sha512":"5319498d0f78fd36bb0257b720abdc8c436b80414dcfc26222d3a6ad30e72fae3d96c7bcf5248df5b500a97fd401f14c7ebe9b5edfec877c801d3c0ed3dfa24e","ssdeep":"192:mkgHygW0Je1ZZe1ZfRWrL41QePHX+JsoMMCHAN1BmooMBA1TBmQzqIUg:+HWfrL4tNwJalzdUg","tlshash":"fc32c69335dbaa274be7aa30cae71307f061239354840d80d2a09c66b9719df93ddf1e","size":11925,"data":"","first_seen":"2026-02-05T18:54:06.183601Z","last_seen":"2026-08-06T17:48:18.466527Z","times_seen":11693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/themes/astra/assets/js/minified/style.min.js?ver=1770262649","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"84dd278be9eb34c8ee2e36f253986c06","sha1":"80438abc2744f7e3123374b13934a84302d6b5b4","sha256":"47041653a16ca07915566a15cc8595554720974b3f27c11fc15693b87e7580ae","sha512":"10b949e4ebd8047c1e0c2309a6b189df8d18f52b9618073606168d32bb568c1c351cd950a3ea7be4b635ef21b1729365c46c9a637085cda9cbf7e72e90cf12c2","ssdeep":"384:bYv9Gy3GyPyHuzpMBzycEQysyyKOJ+dmAIBDyGeiCq2GX2UqDkD9Pybv8gu3syhe:bYvPx6H8A2tfSf+dHemQ5hdqAD96bv8I","tlshash":"e64284962340127604ff1ae6e9dfabc5327224afee0800545538dd1e29a4fe352f1af9","size":13056,"data":"","first_seen":"2025-07-01T15:18:28.237614Z","last_seen":"2026-08-05T20:06:14.922205Z","times_seen":2373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Slider/SliderType/Block/Assets/dist/ss-block.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0530d5ef705106c5c1dca16156400ebf","sha1":"35210943ed5094754d468df9056e38f99995ec05","sha256":"7747513beea611d26bcebc28dc2ea7e21b246c6edbe8b80c4d8c08f7f45aec1a","sha512":"467985b7ea59e72311e9dcb6bf4694e2b3e67fd883124ec1e8f87b5526c36eec23dccc1394d02dd8995c02d30731e1306b51b7ad1e8e1990a2a18301a2f81d02","ssdeep":"","tlshash":"7f610d54aa71297263a115a3552b8a0ce7ba0218f145c02ef9ece9ee84e5a4933227f1","size":3258,"data":"","first_seen":"2023-03-09T21:59:29Z","last_seen":"2026-07-20T12:57:10.091934Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ee4d3cde61e2ccee12f3d80e6050983","sha1":"6dbe531d6e1177516c031ea2a3d1b469cff0fd53","sha256":"2936ab5d0f5a13aff6095fd54ed7e673c45afb70273f9f6e8f798ae4a87ab776","sha512":"e9917fa8dd9952ef81af59e8c412c022878cd84c95a0a10f7e41bff446399c5b37b99991f9ae1f3504a3bb20aad01493d51bfb803da990cc8fbfc4c910f58784","ssdeep":"1536:qToe+iLg7SComv8XoGMjwcQaELRqjbz0guYv9Ft1Zd1lMrnVfIk5kuOlRHO3kmkt:qk8E1JGMjxXzXubs0qTVMYXYM8/byZLl","tlshash":"4124834af214342946db91aa121f450d937a655cb805803dbdececea9df6d0d233fbb8","size":219779,"data":"","first_seen":"2023-03-09T02:28:41Z","last_seen":"2026-07-27T18:21:38.280412Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dec1f43032cc5bb63787b51bd9b42e1f","sha1":"bb411a4d62b5e8ff4a94b91248dd9094d869f50a","sha256":"ee16e195eeef694ffa4f93f5d1688a21ab150f6222d46d419ea1dd1e25a0cc13","sha512":"7afaab2b4f5eecfa672a0a0d1ddbafdf0869b4e05dc87150310d16d9816465d3d54f9ddc76e90051ff956706ca05480bc279b73da00e58a30c78ccabd37da366","ssdeep":"192:0wMAeM/j1fOgXytcVkMnI8uP8pgc8P8p5wyCk8+k9hAFs1xz1OFpyJe4lIM0W:0dAe+HjFtCklkL1OUe4lIU","tlshash":"ce520088e6915d66a3cf46b7562f88099bb6024cf019c13ef5fce8e588e6d0523273f4","size":13525,"data":"","first_seen":"2023-03-07T12:05:27Z","last_seen":"2026-08-01T04:52:45.838273Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3Pro/Slider/SliderType/Showcase/Assets/dist/ss-showcase.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7066afe38f284d7b41a3b4dbc7da572","sha1":"dc7e2754d8f0f547fb5243a2d276fd0b72a5ddf4","sha256":"fc6070efddf717e0c7d783e8b8da33975642ee6c44b55431f89026373bb088f7","sha512":"a2aa57dbcc955db700520f633391412cbcf859cd8a11ef0654e0a4185857039967592a5dc47b6c628dccd265cf80b240cbd63890f32bf6d510d1442a886b0755","ssdeep":"192:0k2s58Hf4VKaNKojryAoUaXy9rDafN9U+i:0W58AVL90UZ9rSI+i","tlshash":"a5223284b744253246e601b3150f9e1cebb2196cb408c92db9d8d9ee6ce784c326fbf5","size":10881,"data":"","first_seen":"2025-06-26T02:13:05.624364Z","last_seen":"2026-05-17T09:35:40.735175Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb15a10a641a318f91e7e912e4f9c184","sha1":"bd41f67233facb96976ed7b8e7207d52c03d340e","sha256":"f40767552e5e94b2d5f9a65d7f640cfa7d225298023dbd682095e040809a3d1a","sha512":"49570d36e5b1ae3c3a4965f7d054258ff676326bee0d9399aa990926e9a762f699de1d09078debadc43b363ae51d740ba33f2e8c64bb223a73d3c62872ebb3d2","ssdeep":"192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY","tlshash":"b60233487946746b3973f0f6218f02ca353a24426ced6854a6e1f8e82d7858d1463f7d","size":8892,"data":"","first_seen":"2023-03-07T01:19:39Z","last_seen":"2026-08-06T17:48:43.299845Z","times_seen":72621,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4d973b0145ad5f4e0021f6c170666900","sha1":"6ed2374803bf568f2eedf1b9ef0524129bdc0f3f","sha256":"0efa913f6a354ed6890184e538861df5d1e99dbf8d5f2cdc1082646ce7f02de8","sha512":"0f08d8901ab4974ae6501bfde5749816b8a008cd51823b23044ebd7884689b3e773c66d1ddb6376f6ef0e49b031977d774db41c2ad03385840f0a9fc887ccc96","ssdeep":"","tlshash":"29f04cf43880947e0d577db8347b1650bdb70207ba1a0c1af059becd589aedd194afb8","size":588,"data":"","first_seen":"2023-03-07T12:03:25Z","last_seen":"2026-08-04T13:55:09.569339Z","times_seen":660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8a56e0029bd044cce73cbfc7d15e4be","sha1":"36bc401bc6608ac15c752e1972c3bd7b8b22a14e","sha256":"cda4943aa43cf029fdc78d94cdc5e82608df6dd3c373e350ebeb9f7466e7bc8d","sha512":"79121457372015658c6c3d1e73836eb64a35fdc27c99ef03cf3bf1a96304cbeaa903fbab9a971575d0ccfe01dd314d5549b72d3440ffbabbcc0966c2d72b4a0f","ssdeep":"192:RJGl88sRfSX3n5he+IO6ZlzwGl88srTXlAGl88s1kSX3n5IO6ZlgmGl88srJawOu:RdYH5M+qzafXlKdH5qgwFlYi","tlshash":"d892c626971639fdd58b92c7e46bb702967d16009f830ea2f3e9844c80ed55c231bbdb","size":19810,"data":"","first_seen":"2025-10-01T07:54:37.32671Z","last_seen":"2026-02-25T18:20:19.491878Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VC88BRD9X1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"87ca06288538f2095ccf15e4efb8b3eb","sha1":"d826ea689e8b1f68e4363e7c42aff6b6e06f09a5","sha256":"f93c9a702859c93501d25f289e193660d14d115a871cf1b443d2938ac6b2fbf5","sha512":"609ede204228facb2970e3754354cfbb58b48fd07aee28be4ff835f5f7a435de69c0a613a08c8167ff034d21ab968fcacc3917e51dc30149bc52e2f36b518654","ssdeep":"6144:WwkOidcol7Yb7XyIGQf8JlVoe9fHU+O7N8KCbDXqbHvO:IX+ol7Yb7igf8oN8nqq","tlshash":"158418cd73d670269396b478503f018ba57b69a2f84cc899f18adce42d7469a4233f7c","size":400414,"data":"","first_seen":"2026-02-25T18:20:19.472984Z","last_seen":"2026-02-25T18:20:19.472984Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-08-06T17:51:13.620186Z","times_seen":348029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/astra-theme-js-js-extra","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"94138327a2e8a55824b1f0e726b75f02","sha1":"ce21034501a3588a7e1ca5a560d07fef8d22a133","sha256":"fd4f66d68657d3ba866bd5dbc389ba465e6332ec8b29c33ce0c4f2fc21801cf3","sha512":"3850a8d01ee5d4d7378d41c6f9b6eaa8f87947923e8561ada462e562ca5c7f735e255da58919d8e6dc9146479752f5b0276e46ea4d27da1c4b0ffb8c3b6ee691","ssdeep":"","tlshash":"a911a904c2d22e01b6db4cb290218fa8b0fd9080e1d8f08dea7c4e4862e6a1a1b68209","size":894,"data":"","first_seen":"2026-02-25T01:45:06.700595Z","last_seen":"2026-02-25T18:20:19.493188Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"1c06321d396aa69aeee9d3a1cb061086","sha1":"2aa38ec38a279e68ca7dd0ee1f68408355ca7d9c","sha256":"c9d86236e694d4a539c22704fa1250d9474630375cfec8f0b31afe7f95eac44a","sha512":"35543173e1d93d0656370ac2b3642bd4a568cc47b5b6bfef7eda21d5b20574ba2615f69aac5c9182fc2eaf50c842d965a914f186698e9ada14cfa3b3d27d4ad4","ssdeep":"","tlshash":"92700000022200028082008a880002200008200a20028288020808cb02200ca82022a2","size":21,"data":"","first_seen":"2023-04-10T21:09:24Z","last_seen":"2026-08-04T13:55:09.574522Z","times_seen":517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3688fd64c409264431201fa55a828e81","sha1":"2b7eeefaa1edf3a7621f7576b35b01c895ef5367","sha256":"944433761a880eab1d567dd5389499af76aa03582c82a8aa88838e3c6c2134c6","sha512":"1393fe2f189899d68717be994820d19a7e89660ea5cd90cf4a2d3dd07b41c95c2f63a3a0833d2407f16be6a3eae698ab549eac52d4ffc82bcd2da0e4e46da210","ssdeep":"","tlshash":"bae026faea5a457101e6a1237bce739e293665a3a92a4c402899ce806838dd31126ed1","size":333,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-08-06T09:53:04.397301Z","times_seen":39291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e2361f2410db13160448aa9d894bf02","sha1":"7ea0458a03f5e228c1346468660e841edf7b3440","sha256":"e8eaeabbef9dc35da52d49960736c061ea2f0a62d05cf38f03c6e9d9a67b4976","sha512":"d3377eae855906dd0b5736ed31de4a92b48537a11f5e49a1b1dc17cca4257b62e73e3e20f1f8a21ba93a3bb42f2b431ff1011fe3896da54a0638190ffa00ce06","ssdeep":"","tlshash":"7dd0a90402d22e0176db0ca290218fa8b0fd9080e1d8f08dea7c4e4862e6a1a1b68209","size":220,"data":"","first_seen":"2025-12-04T04:23:48.322957Z","last_seen":"2026-05-31T05:05:00.430101Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce508719eeface4176d82c2f600354fa","sha1":"d5387e85030e0d47d0ce5e3b1368db381055d28d","sha256":"37bd3c5eb64313910aa5b85c4500406626cd42b7c1fd684b5700b041f04bca69","sha512":"8882caeec5eb9fb2d95fdd4d326c601286d2046c42c33ece03145361871b127c85a03bb4e7c236c8fcd1ea313f3611e82c9c3c0a2a508d3dacc232098eb49c75","ssdeep":"","tlshash":"1ab012c1a0ac8b98fc761c10023041727005bd86d7315447e00c418c822250073a4113","size":96,"data":"","first_seen":"2025-12-04T06:24:37.796816Z","last_seen":"2026-08-05T07:35:50.065688Z","times_seen":2180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/7516a25587c5d3f27923a2b261923019/adlib-hUGE.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/7516a25587c5d3f27923a2b261923019/adlib-hUGE.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5874\r\nlast-modified: Tue, 21 May 2024 17:47:07 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5874,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"87c1a83fad321c9dbda1bc8d11627f50","sha1":"900960da7c4a6f11918b4c063726d8395f184bed","sha256":"a539294285e097e8b0b55bc3d5303b5d0b9862852ae698dc8e4505674063f3bd","sha512":"de5bbe54791607825d2fe5cec45bc1ab552c1dba6ef12d9b434f0c837959c057e4bc038bbdb180850422ddd0f859df67ebea3cd68ea93b5c4d41f5ce3ff29d48","ssdeep":"96:alhbkq6jx6aMWK/f/K9GHt3Jf6yaCx4/gcb3j46yBdflDzZnN1GOhfkc0MZYqPXs:MG9jx6h7/f/UCZp6yFygcDj46yBn/Zng","tlshash":"9ec16cc42f963f647fe28155fcdd185ea4e1069672799a4a20628d0758336f8eca7093","first_seen":"2025-10-01T07:54:37.156811Z","last_seen":"2026-02-25T18:20:19.435179Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":411,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/pngegg.png?resize=180%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/pngegg.png?resize=180%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8514\r\nlast-modified: Mon, 23 Feb 2026 11:48:55 GMT\r\nexpires: Wed, 23 Feb 2028 23:48:55 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/pngegg.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"88cd8ca115769340\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25e3b9ebf791eccb09422a92ac15d5b2","sha1":"4817a0fe581fe443e74151bb9382478031cab2c6","sha256":"24f9d0af97f36a998fb30b8329a0ba74ef7a81571d4b1dabf8297f79a8f36766","sha512":"3f45b1064d74633a473584b446eef1fa2196add40c732746b6ada5033a698f49d78b0dd3a6e0b13ec680fe57d1cba61c2294095a01ef36feaabc0cd31be1c902","ssdeep":"192:gtGDL0GChbmW2xa7gxr5BLCDC/sBEsIqwEWOBHATSInfsnU:gcYjhaWGcNDaqIXv4QLn0nU","tlshash":"8a02b08144b8d5a09fde71f8dcb543aaa74896191144b228c6c10f13f991702773bbae","first_seen":"2025-10-01T07:54:37.071492Z","last_seen":"2026-02-25T18:20:19.436349Z","times_seen":3,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":56,"dns":0,"connect":11,"send":0,"wait":52,"receive":4,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://themilgroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 09:06:23 GMT\r\nexpires: Thu, 25 Feb 2027 09:06:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nage: 33210\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-06T17:51:08.668188Z","times_seen":254277,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":301,"dns":3,"connect":40,"send":0,"wait":9,"receive":6,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/Naval-Research-PNG.png?resize=180%2C181","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/Naval-Research-PNG.png?resize=180%2C181 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11632\r\nlast-modified: Fri, 06 Feb 2026 07:06:51 GMT\r\nexpires: Sun, 06 Feb 2028 19:06:51 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/Naval-Research-PNG.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"b59f78162cfba07f\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ac0af0f7d9caaec90bd26b3b6a64986","sha1":"fd4dc2e810923f1fee209bd30c6f574f41efd50e","sha256":"0267cdfc3e0b66c0d0449377e23d948855d77128da860b530be0e5ac4ce324e5","sha512":"f77a87e9b7957b2e1d8649669211adbaa7ac66f2edc0a258eb9f629f1a9ee27f29933f192e2b94e79938fe4da6cb6cec399f53dcdf3c78d72961abb27e4aa916","ssdeep":"192:Dt2Sa8MpcEhlvavM3Sb9Z6zy3CRk9aF3qZrKaS9QslJkDq0n9La4:xcp3ajj6zyYVFGOh97lKWy","tlshash":"1432bf428585c371f9008942872c5154f934efd762dac44f91bb6439c6f917ee8ea0bf","first_seen":"2025-10-01T07:54:37.104801Z","last_seen":"2026-02-25T18:20:19.437396Z","times_seen":3,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/d11e28ca7d0e545fd554cf9f55492b77/3910483-scaled.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/d11e28ca7d0e545fd554cf9f55492b77/3910483-scaled.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 71256\r\nlast-modified: Tue, 21 May 2024 17:47:12 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":71256,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x929, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bcde720383d4cb75794aa919aa1316ef","sha1":"6bfbde123db65df1d8392245ed7ff86f6dfd2cb9","sha256":"952e39ad56341a4540735e2728522a3beca600c8e450617bbeebd1e99c0e8199","sha512":"238edfbd7a6ecff0d2e6b1b214456d1a71f584bde6a6b8abb1b82663ce57b73620fdce6f09b045ae51422fd605052eb43cf16cef61f6371a06d8b265d4710592","ssdeep":"1536:oeQRA7jkcpu+bxTsEgdESFQRQOyldp0OLv6rFYJ:oeQApu+dTg9QRnyldp0OVJ","tlshash":"1e6301de89597a756cea3229b2a305e4a107ed483f04266bbdf333e72d0836510f6507","first_seen":"2025-10-01T07:54:37.161018Z","last_seen":"2026-02-25T18:20:19.438588Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":733,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/688358754af55e88c481ad4a214a1dca/Female-network-administrator-603713-scaled-2.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/688358754af55e88c481ad4a214a1dca/Female-network-administrator-603713-scaled-2.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 102594\r\nlast-modified: Tue, 21 May 2024 17:47:11 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102594,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x934, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b995cce412e04264764304ed1df32753","sha1":"aa6e0625d5f54d0385fd85f8837a527b4ac1073c","sha256":"2ec5f27cad1f68c39e8d43be600eebc5a61b803061b0d86f23e59fdabc31affe","sha512":"6dbfc7fd6c3fa9792a484b0a112330b542f5250a54ee631b8c9fe69df0f92410d21fb9e8a4e5253fe755f9edd534455c722cb2a141e62f3a33dd8219c3a333c6","ssdeep":"1536:fQFZIHRz+7qDwjY4blkOfh4FTgQwZYh9CxR3kvYsuantPkGlyrwgkwavBb0f4:fbsHbqOfh4xS+4pkiatPk6OOBo4","tlshash":"ada3127510f8ebea0d71f4e6b5f847816cab5365e8e1a05f4b2d10af128330b04be71a","first_seen":"2025-10-01T07:54:37.207891Z","last_seen":"2026-02-25T18:20:19.43925Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":858,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/Seal_of_the_United_States_Department_of_Health_and_Human_Services.svg.png?resize=180%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/Seal_of_the_United_States_Department_of_Health_and_Human_Services.svg.png?resize=180%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8514\r\nlast-modified: Sun, 02 Nov 2025 15:06:20 GMT\r\nexpires: Wed, 03 Nov 2027 03:06:20 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/Seal_of_the_United_States_Department_of_Health_and_Human_Services.svg.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"2a33628f752df36a\"\r\nx-bytes-saved: 369\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"af8a50d975e9ac5acc3b20fe128cb59f","sha1":"89292445e2fe6914504cb0440e538e262d9881f9","sha256":"460ad7f3b167db5450f5717ee25ca6e79d69e1cc8edf496e2676220d3672760d","sha512":"0364513075c3ee6767bf21431a693d2f1817024b7d4aab33b1728627ff3c2ac434b8c3c436513f776a4f21b24bb8bae247640330902200a196615b2483dcdf54","ssdeep":"192:aoSGa1imRLvjxVJ1MNxQxRXE0XnbZInYzB5Rb4X:rdUrLvjxONmxRxdB5Z4X","tlshash":"db02af8a9453611ff657008a27a99d65345d1fe0cc208ff04356f427b0e882533fbe5a","first_seen":"2025-10-01T07:54:37.225228Z","last_seen":"2026-02-25T18:20:19.440193Z","times_seen":3,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":54,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/oswald/v57/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://themilgroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 19:54:28 GMT\r\nexpires: Wed, 24 Feb 2027 19:54:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:45:39 GMT\r\ncontent-type: font/woff2\r\nage: 80725\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21472, version 1.0","md5":"5f49329007f1e2c86462fd68a5f3affe","sha1":"aabe123b52750eaf9e6fe604204c2687222b0c54","sha256":"571f3457dab507b6f2ce5394d593ca015251b69fea81ab7a546bd2368e9fc3ed","sha512":"59b693cf63d3bc706adc09d289f51f3be1ed2cec80a6e1ebfaf35a5b569ed006e5785cf1faa884e133ab83eb7a0fce9c4545c512c9e7fed63e94264fb13c4937","ssdeep":"384:89cq4KprqBvQGNLahU+kaK7dWYQmQp48QMg9syZ/0TxUAWKymEIetG0pLlZxeH:8iq4cmvfNLahDK7QVmQqhw1EjLLMH","tlshash":"4da2f1a25a83d949fb68403e3b80287d963a03c733967a63575225ebbae1c53305a4c9","first_seen":"2025-09-11T17:19:09.761048Z","last_seen":"2026-08-06T17:15:01.219215Z","times_seen":13067,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":211,"dns":0,"connect":13,"send":0,"wait":10,"receive":5,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3Pro/Application/Frontend/Assets/icons/fontawesome/dist/fontawesome-webfont.woff2?v=4.7.0","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3Pro/Application/Frontend/Assets/icons/fontawesome/dist/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_VC88BRD9X1=GS2.1.s1772043593$o1$g0$t1772043593$j60$l0$h0; _ga=GA1.1.1435851125.1772043593\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-length: 77160\r\nlast-modified: Thu, 26 May 2022 13:53:43 GMT\r\ncache-control: max-age=2592000\r\nexpires: Fri, 27 Mar 2026 18:19:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-06T17:49:23.748672Z","times_seen":527919,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/70ec99e4ddd4461fc093a70ef1bc6da1/full-size-logo-withoutwords.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/70ec99e4ddd4461fc093a70ef1bc6da1/full-size-logo-withoutwords.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13258\r\nlast-modified: Fri, 24 Sep 2021 23:34:18 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da7150e613e53133a24e3d7b4816c797","sha1":"e0ac6563bcc745cbcdfae55e76cc7a6c1ceb6dc2","sha256":"96b9b6dc9885c22c11099cbbbba134d28fb1d4f053d2beb7e16f2cb7c7a6f878","sha512":"4e02b67ca8ac67dde5be55f3a345ef2fee75468e53ef069366d6daaf5330b7c6b45092e3e5cfd8da2d0eb6ab540f83f4001ff84549a3c2cc596528878b15e0ed","ssdeep":"192:rGwNhaZAAHV7NoSMyaGSmTstcgdZUTx0HSuUVe1kBS8oTCuTZNjfOkpf/8UNUwxY:rbGbJjf8cJTEL1kc8ouFUC/+dkQy","tlshash":"ff52cf76d1bdebafca4e47f1d01893e478a032f4555654ba51f256140d3aeb83da0c70","first_seen":"2025-10-01T07:54:37.08518Z","last_seen":"2026-02-25T18:20:19.442936Z","times_seen":3,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/7f603ac3ce0350360dfe5a52e29545df/pulling-forklift-376421-scaled.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/7f603ac3ce0350360dfe5a52e29545df/pulling-forklift-376421-scaled.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56680\r\nlast-modified: Fri, 24 Sep 2021 23:36:54 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x933, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5d91ee8678e32371ce7fd12c5ca188e9","sha1":"ce6588a27c6062b211fcbfbf2c37098ab90cf7db","sha256":"b119c929fe4a85c6c673a3d445e73a2e04e5aa5ae8950d39b8d6159809437661","sha512":"084c8befdb714aed23ea74b592f3971c0308c1df6192100175155292059360f31a586f4b9f4ba149df04f570f3dfefc2341c95eab1a1cef8d203747f7aef78ce","ssdeep":"1536:KTcA7+jvRFzIoxNM+KqJ+VUODcCVTGNtkC2HhuW5d:c7uvXxNMQMVUOVtGNtbZWr","tlshash":"dd4302cf78c02dad7d6f7f74429a23ea62aa57ad0a09a45ce7e1e8cf0574146d2c00f4","first_seen":"2025-10-01T07:54:37.252765Z","last_seen":"2026-02-25T18:20:19.443743Z","times_seen":3,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":436,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/Seal_of_the_United_States_Department_of_Justice.svg-1024x1024-1.png?resize=180%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/Seal_of_the_United_States_Department_of_Justice.svg-1024x1024-1.png?resize=180%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16816\r\nlast-modified: Sun, 02 Nov 2025 15:06:19 GMT\r\nexpires: Wed, 03 Nov 2027 03:06:19 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/Seal_of_the_United_States_Department_of_Justice.svg-1024x1024-1.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"441c40d428cc4a74\"\r\nx-bytes-saved: 1422\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16816,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bff5608027c7caaddf874e29f969d7f7","sha1":"9041029e7d1427ed55581b2f626200b4589762a4","sha256":"53b6c0e5433a095a04055caba0431bca942ca6c0c5b7c8740d08e428577bdb90","sha512":"31f76a7fd342d7da7760d87035e9e79ff26b8bdc2c1d28c60eacd071c0d294d9ef9e914068ac0204c98045e8ee08bc436d1ebae435f27ce8bb2b110b018e9b5a","ssdeep":"384:gT+n6FB2VsHIdofNAl0fqqxkmrLJfqJ9X2WJ5vOhN:XM2JdoVBfYYIX8N","tlshash":"3c72cf6cc1db70c549c66242a9b14c56df4096917a8167222b84e84fc9772f179b13af","first_seen":"2025-10-01T07:54:37.298021Z","last_seen":"2026-02-25T18:20:19.44466Z","times_seen":3,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":58,"dns":3,"connect":26,"send":0,"wait":53,"receive":31,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=6da04383 HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 May 2022 13:53:42 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public\r\nexpires: Thu, 25 Feb 2027 18:19:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":219779,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9ee4d3cde61e2ccee12f3d80e6050983","sha1":"6dbe531d6e1177516c031ea2a3d1b469cff0fd53","sha256":"2936ab5d0f5a13aff6095fd54ed7e673c45afb70273f9f6e8f798ae4a87ab776","sha512":"e9917fa8dd9952ef81af59e8c412c022878cd84c95a0a10f7e41bff446399c5b37b99991f9ae1f3504a3bb20aad01493d51bfb803da990cc8fbfc4c910f58784","ssdeep":"1536:qToe+iLg7SComv8XoGMjwcQaELRqjbz0guYv9Ft1Zd1lMrnVfIk5kuOlRHO3kmkt:qk8E1JGMjxXzXubs0qTVMYXYM8/byZLl","tlshash":"4124834af214342946db91aa121f450d937a655cb805803dbdececea9df6d0d233fbb8","first_seen":"2023-03-09T02:28:41Z","last_seen":"2026-07-27T18:21:38.280412Z","times_seen":22,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/8dbbf6f724dcc626f19967f36c7611c3/full-size-logo-withoutwords.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/8dbbf6f724dcc626f19967f36c7611c3/full-size-logo-withoutwords.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12664\r\nlast-modified: Tue, 21 May 2024 17:47:05 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":12664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5e21f3a4d4c29025b88a1ab73f23d17e","sha1":"787ce4a4fb0621aecc3a5397ae7697d0ca0e7758","sha256":"c2f8675cfd4cf264e7c2539e39d3c05eb68f3964758e8b92ba02998ce7b237f5","sha512":"790d6635f125169febf5706980394d2b9ef33aec7d25d8f847404cf5ee7cf773827da08424c2cf74bfdbc1bfe8e1ef35025ff11e01b8aad07ed90d9736b0cf2f","ssdeep":"384:AKcSnqYuGwZP3J+Ya7NsmsFrdA1o2wYX:uagfvwCmypZsX","tlshash":"c742d08d4b8e0b046e4967bd07dfe5c3f72c0f12695ca6fd26662431092a4d356637c7","first_seen":"2025-10-01T07:54:37.190415Z","last_seen":"2026-02-25T18:20:19.446147Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":504,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/16dc8aa703c183b356e0c11922265f49/Female-network-administrator-603713-scaled-2.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/16dc8aa703c183b356e0c11922265f49/Female-network-administrator-603713-scaled-2.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 152420\r\nlast-modified: Tue, 21 May 2024 17:47:06 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":152420,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1281, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dba96f4aca1286b8d8edd203a199dc37","sha1":"a8c25be5399143886db0aef96a95df72d39cb461","sha256":"2f8ec1c03e5cdef02844ce2ca3b968ea6a984ae97811dd1b63054a0c176acbe6","sha512":"74cec8feb10655cf13913db4372d667721831106febd9f3f5b32f98b1084dc5a75017d47bc75bec8e5f8dc9adb83a3c55d39a27d9cf080a3dfb2519938d3e7b9","ssdeep":"3072:mYZGthteIAqACl/bAEP/EgQEfhcaoPGM428N14pUy4PRodUY:r6teIAqAClN/R5tv34pUy4PRZY","tlshash":"93e3122aa69b92a24a743a774af1eb7d6451165520b11aff5e22f3cf837e41cc00737c","first_seen":"2025-10-01T07:54:37.237683Z","last_seen":"2026-02-25T18:20:19.447092Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1010,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":597,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/f6b3085a984c1498d23afb4e869462b4/ingersollrand_authorized_dealer.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/f6b3085a984c1498d23afb4e869462b4/ingersollrand_authorized_dealer.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12698\r\nlast-modified: Tue, 21 May 2024 17:47:05 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":12698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"505754f0bf0200efad45c5e00503cdcb","sha1":"cc68f711d7f631058a4e94ea38a9734ac80c3b90","sha256":"36b3ba2f95a36d930c1c8d39dc13c5eb1d19c7d4d1f308eb9dd6e6544ee76654","sha512":"ccd6f86b240d1a218074be510b7f90b2d124f2a2763d0c2fa05652bdf0c2799afe9abc7862a3da0ac67d89463e6d391a224077c3e1da168f8f048a1c2f3e7934","ssdeep":"192:D5y72VWBgUIPUgwNvvQUOarsOJS4xK5COSc7wa8MnAhyglmha0AwDq5Y:ly7uWBRgwNgUdScK51SuhWytBD","tlshash":"ba42cf5f6e4cd581dadf18f57c586f08902d2aaaf7a033c92069744b4ec1a20cbac34b","first_seen":"2025-10-01T07:54:37.152824Z","last_seen":"2026-02-25T18:20:19.447968Z","times_seen":3,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/aro-seal-1024x1024-1.png?resize=180%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/aro-seal-1024x1024-1.png?resize=180%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13066\r\nlast-modified: Fri, 06 Feb 2026 07:06:51 GMT\r\nexpires: Sun, 06 Feb 2028 19:06:51 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/aro-seal-1024x1024-1.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"09a4b1c702475d9d\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3d7f9970af5b33585df31b4025ef79a","sha1":"49800adc45700a61d1f6b959066ea4661fb3ceba","sha256":"8c6ccf68a2b15aaf20faf695612d590ee98246f8335017f948f7e4a5f21d5f4f","sha512":"82a96c45a409789ec0c8f016224b568f1a20edab8bc43c001b13a423039dc96d1d24818ead4f5e580561d969e23f267c28a1b9d9a042956c85ddb78dad136f02","ssdeep":"192:32o+dqHAhrt8O75A3etFEXZbh8JwGumdH2Aar6iSX45Zi62NXc3qiYbh:GoLAhJ8OtAzVhp1mTviSIh2xc3E","tlshash":"9f42b01c36d6458f02f4a66b4463d6fd88d492e19d522a4584ac481f7ca3bd1bc3e875","first_seen":"2025-10-01T07:54:37.261997Z","last_seen":"2026-02-25T18:20:19.449103Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/1024px-Seal_of_the_United_States_National_Transportation_Safety_Board.svg-768x768-2.png?resize=180%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/1024px-Seal_of_the_United_States_National_Transportation_Safety_Board.svg-768x768-2.png?resize=180%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10384\r\nlast-modified: Fri, 06 Feb 2026 07:06:51 GMT\r\nexpires: Sun, 06 Feb 2028 19:06:51 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/1024px-Seal_of_the_United_States_National_Transportation_Safety_Board.svg-768x768-2.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"c421fa8df0d0eeb5\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 18\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=5.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9cdb8dc1178319c3630eb9bb4b323b59","sha1":"3c9971fa20e950c76fe2687ff2e4eb6fbd42621c","sha256":"1d016591fc8ccdd7cb06a9cc51ee9c57fd906ccbcb912366247df96b6e8f736e","sha512":"451ca2edbd55ec4cc8c13a5e747a63b72740c1fc7c9bfb71cba5a245e63d6c7cec46a8127d32209ab14b8bb062f670af0c673379b51f5e48d94819fc8e018a72","ssdeep":"192:XUf478wVAnUv6BrzSxFm96ycj7cuOc5waisLAp97mqJFpDO4L6do93RaUVt2I7di:XUQ7R2BrQFvj7cuwaNMpFXq4L0o9BtvQ","tlshash":"8022c0a7d0dcb13861e9c3888167dc1f87f697317f21d29c0da26da0d333969d20d92a","first_seen":"2025-10-01T07:54:37.125532Z","last_seen":"2026-02-25T18:20:19.449714Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/2021/01/cropped-full-size-logo-withoutwords-1-192x192.png","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:54.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/cropped-full-size-logo-withoutwords-1-192x192.png HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_VC88BRD9X1=GS2.1.s1772043593$o1$g0$t1772043593$j60$l0$h0; _ga=GA1.1.1435851125.1772043593\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 6754\r\nx-litespeed-cache-control: no-cache\r\nlast-modified: Tue, 21 May 2024 16:57:56 GMT\r\naccept-ranges: bytes\r\ncache-control: private, max-age=10368000, public\r\nexpires: Thu, 25 Jun 2026 18:19:54 GMT\r\nvary: Accept-Encoding,Accept\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6754,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"6624812de33c8863ba308f12a2c3f465","sha1":"598949f70c1ee85208a5461c6f2911486eb72f13","sha256":"79a63bcfcebfbb6c542f58fc51b18258f96d0341cb4b129d8b523128a133b826","sha512":"c918220566a0818fea29e222aa18567a1f227b573d6f1637fcc5be7c49ae3ec7f7c560cb7877d57ce19262ead01c470449397f3e9fe6ae58f8c02d80eb7f1957","ssdeep":"96:3cU006hlwYMRFX2be3S/hQWksCPLhCHuVKOL+laD9RTLX1s1REEQ2JrNlGyCXWWv:MUwlqR21GWDCPLhCHuVDRvXE6eLGyCX7","tlshash":"f5d19fbf41958a0ff0efc2acac5f455ada7450dce82016d9014afab14e21aec1a8d217","first_seen":"2025-10-01T07:54:37.200854Z","last_seen":"2026-02-25T18:20:19.450514Z","times_seen":3,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":438,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=6da04383 HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 May 2022 13:53:42 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public\r\nexpires: Thu, 25 Feb 2027 18:19:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13525,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13525), with no line terminators","md5":"dec1f43032cc5bb63787b51bd9b42e1f","sha1":"bb411a4d62b5e8ff4a94b91248dd9094d869f50a","sha256":"ee16e195eeef694ffa4f93f5d1688a21ab150f6222d46d419ea1dd1e25a0cc13","sha512":"7afaab2b4f5eecfa672a0a0d1ddbafdf0869b4e05dc87150310d16d9816465d3d54f9ddc76e90051ff956706ca05480bc279b73da00e58a30c78ccabd37da366","ssdeep":"192:0wMAeM/j1fOgXytcVkMnI8uP8pgc8P8p5wyCk8+k9hAFs1xz1OFpyJe4lIM0W:0dAe+HjFtCklkL1OUe4lIU","tlshash":"ce520088e6915d66a3cf46b7562f88099bb6024cf019c13ef5fce8e588e6d0523273f4","first_seen":"2023-03-07T12:05:27Z","last_seen":"2026-08-01T04:52:45.838273Z","times_seen":116,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/eef485259c13f68645e25d4bdbf922b4/300-optimized-full-size-logo-withoutwords.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/eef485259c13f68645e25d4bdbf922b4/300-optimized-full-size-logo-withoutwords.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7000\r\nlast-modified: Tue, 21 May 2024 17:47:04 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9c30f63d57cbe051991977d8a1a19cd1","sha1":"bf086c7f5544e33a51744ca7a0a80ec6d5749247","sha256":"14d3e87ce249530d55c83f518c2d78037447f8384eae33121e115a0b8c5f584d","sha512":"98d7b9255e3585bae64356775572588bd1267e0a0b320f4523c12e25e63db1d565bf8de77f11ef570ee7cfd159f636d9c224049e57069d18ae07b91657c74245","ssdeep":"192:sqfkvsBfRmavDPuKeHT/Z3t2FjbSi/m8BzV+sp:shGfRmkDPoHTdMFbS0m81Us","tlshash":"85e19e3a50db0e653d4339b2175e770068e979e6f065ede386c00a2399322fa12743b4","first_seen":"2025-10-01T07:54:37.276036Z","last_seen":"2026-02-25T18:20:19.45169Z","times_seen":3,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/3bb92d79aecde20da5701546529657a4/LawIQ-LogoWithTagline-FullColor-RGBCropped.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/3bb92d79aecde20da5701546529657a4/LawIQ-LogoWithTagline-FullColor-RGBCropped.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40596\r\nlast-modified: Tue, 21 May 2024 17:47:10 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7448f8cfcc10f54d04f603ea102e077f","sha1":"4b7496bdfcf94b474589076f011d228c1add71f6","sha256":"21ea8b359ab15fce4e8bd8a6dc2d9a62b1588c91141d5a952c98dc9797ab2394","sha512":"e70b8fdc522784ce00d20ef103934fddc13a249739f9f7962c795c1d8fd84694d3d8a74e4cdeb1462911160e2f1c89c7390006f1c31b275308d06813e980c548","ssdeep":"768:pz5ieRniuXfHwN4t/35aBnwigFo9VTJNOZrEKB29SP1rLeoMD3l:pz5iec9+t/sRwcbOZZB29w1WoM7","tlshash":"5303e107ca340643c278d4ba105c686dfc7da67860d7e9878feddcd62685a039dee0e0","first_seen":"2025-10-01T07:54:37.166073Z","last_seen":"2026-02-25T18:20:19.452511Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":511,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/800px-Seal_of_the_Defense_Logistics_Agency.png?resize=148%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/800px-Seal_of_the_Defense_Logistics_Agency.png?resize=148%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9614\r\nlast-modified: Mon, 23 Feb 2026 11:48:56 GMT\r\nexpires: Wed, 23 Feb 2028 23:48:56 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/800px-Seal_of_the_Defense_Logistics_Agency.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"d59d724423ade099\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=10.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3076a7640382587fe2fd932845b22cd4","sha1":"535414aee8457ce9102c5fdc7adccd7324cadc7d","sha256":"623fe670a074c3904bf7a2ff493a74875275e62d72b1940503dceeb44cd9f8b5","sha512":"34bcc2135f932980dd9f4cc5a526d7c39d6aac8c7487442ae37fb3de8bfb68b5ca524d49bcfd2e3927b372b9e01055ceb5dce4daa8c19dde2300de94af9cd15d","ssdeep":"192:VPTVD2cMTiaU+PHiMpfXFCDqbpfy3lmc17QaLiBQK77mC6x:hTVyTvPiu4u03sc9lGuJx","tlshash":"3612bf1e4990cf37eb0925fc36219ba701a535236234349c217ad4ec862bff75e645da","first_seen":"2025-10-01T07:54:37.302304Z","last_seen":"2026-02-25T18:20:19.453193Z","times_seen":3,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/1200px-Seal_of_the_United_States_Department_of_Veterans_Affairs_1989%E2%80%932012.svg-300x300-1.png?resize=180%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/1200px-Seal_of_the_United_States_Department_of_Veterans_Affairs_1989%E2%80%932012.svg-300x300-1.png?resize=180%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15972\r\nlast-modified: Mon, 23 Feb 2026 11:48:56 GMT\r\nexpires: Wed, 23 Feb 2028 23:48:56 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/1200px-Seal_of_the_United_States_Department_of_Veterans_Affairs_1989%E2%80%932012.svg-300x300-1.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"c93a8ba2fdf84e51\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15972,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"deb88a3d2e4af5830839161a8c0ebff0","sha1":"a923497a2005f779f00164fbc672a362d1388d3e","sha256":"db770162a8e2068582a2b89251b03d1b065fd4ec9d3711dbcc1c6f13472a4108","sha512":"c3a38e9afcc3542bad88a77262f938846327700f2f37985191cf904236e3a0f5643c5c3960065cf72c917b132717f5a2e6d5d16178e6e804bcd2e4fab148143a","ssdeep":"384:A3ooQ15b1yiO6xPFL6fr2LbzgS/ApwHKEAeewF8OSRLq1:A3o5dsipxPR6faLwSIp+shBRA","tlshash":"4a72d06447bb5ae93bc192c2ebd40e5c86634052edfd135b49ccf8944552cad8b2b347","first_seen":"2025-10-01T07:54:37.078419Z","last_seen":"2026-02-25T18:20:19.454022Z","times_seen":3,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/20a98256099932bcacf166c85aaa5528/Map.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/20a98256099932bcacf166c85aaa5528/Map.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_VC88BRD9X1=GS2.1.s1772043593$o1$g0$t1772043593$j60$l0$h0; _ga=GA1.1.1435851125.1772043593\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 90844\r\nlast-modified: Tue, 21 May 2024 17:33:04 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1016x677, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"56ef979520ccc1fc5eb19d6aae50a4e3","sha1":"e42d0c77ace19b0aa6b8e657eafb82c17a4067fd","sha256":"38df87cff19a1196f0487593c08c22679d68f264f8136c459e278e2c1735e6dc","sha512":"2d746054b1c28571fe6e93097a8edda33b08782861feffbb34867a437612a1015aaff79a62074d2ad6dc62401d8f00a108c76c5fd9bb002acb3e63f4aa02a72b","ssdeep":"1536:Q4PcbeRz0FUGcdQxoOeeyB00mBQrtxF4rZddYC+WZ28uIS36pBNz25lhF:QSfzxQxo1ecgEt4rJWWM36pBF8lD","tlshash":"3d9302f5c36f60e69b681ecf0c6457cee2b0e2be9d0e500e6c51c19ab5d79336502a62","first_seen":"2025-10-01T07:54:37.129945Z","last_seen":"2026-02-25T18:20:19.454938Z","times_seen":3,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/f09e80f5cc4f8885f42da6f0b0b714b1/Group-of-reporters-taking-interview-558726-scaled.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/f09e80f5cc4f8885f42da6f0b0b714b1/Group-of-reporters-taking-interview-558726-scaled.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50288\r\nlast-modified: Fri, 24 Sep 2021 23:36:56 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50288,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x933, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1d007e7fffea022175a5eb3af83b9cfa","sha1":"f64b55491da8483e63db8ce5c30e0c6760cee52f","sha256":"73b06917c3b9afc70777d08bc5fbabb08133744b56035a89428a435fc36328cc","sha512":"0e4873755d45b529c9a5a77545b5f4cfcb70c2b13c7915a0965adaedb472e8db7b9bdbeb28bfb347334d4cb32c7f0893ab8254f20378b078d9a3838f76cfffe5","ssdeep":"768:SPjOr1g1UTs6hd+MbFus7X54qTXyM1F8avGnCurXLt6/Gy3eLOOoCnZXUKb/6OGe:Sbkkys6hHpL1F8avoO/GAKO9CZXUKPIU","tlshash":"76330130494785db8f02c4ab5d4083d25a2cbdedca9a9eda11297f7ccb816c76bf0e45","first_seen":"2025-10-01T07:54:37.117621Z","last_seen":"2026-02-25T18:20:19.45577Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":665,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/d18eb012224f408cd71c4e8c32466075/Pipeline-1.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/d18eb012224f408cd71c4e8c32466075/Pipeline-1.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53728\r\nlast-modified: Tue, 21 May 2024 17:47:14 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53728,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x933, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b064883bfe44a3f19de6759076dd2474","sha1":"7ecdabf1ffeddf482c5ec4fbc5f824eee0d899cd","sha256":"8f022ea737b0bbe7e2d25c1b137a0bfea3a596fe1cc4e78261769108d33aa35c","sha512":"6235c8c9b206f5143d46ef4fceb829e0af6f4b1ce79d8fb9d26e81778fc008ff0adb16ed6dcd202197ca4ee48e5c8b75ff356fc9b025c087139f6f15bdf6e02c","ssdeep":"1536:RM6ZJ3UbhWbuEEIC2MfH9+dcFy9C9BDeYjUqPG:S6ZJ3GWbjE52MfHcdl9CjCp","tlshash":"ed3302387b6d4338f4c278da9a270586b0c66d145d85d45ab09d06eccb22ed6e36fcca","first_seen":"2025-10-01T07:54:37.098917Z","last_seen":"2026-02-25T18:20:19.456619Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":1260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2020/12/gsa-logo-png-transparent.png?resize=1882%2C749","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2020/12/gsa-logo-png-transparent.png?resize=1882%2C749 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11598\r\nlast-modified: Fri, 06 Feb 2026 07:06:51 GMT\r\nexpires: Sun, 06 Feb 2028 19:06:51 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2020/12/gsa-logo-png-transparent.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"dd881077f7a09a8e\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11598,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75c6dafec2dbf604b982a8570ec3c7ca","sha1":"c14727bd67be8885edb5204238a1b2f4c3fcd40b","sha256":"6378beefe1d1c958b756a1c12407ded719bd55a5c355de9fb1902b10c24ee253","sha512":"108a2260fa59de76bb920147c106e261e0ef1ef36625ab7055c27805859a46f55eba519b80dd3feb6d685b839923dc924df50f006315bab56c94ae6a9498de5b","ssdeep":"192:Kyh9o2RisIRPoBVI1uEYfyKcwlUjcw2+2++/oH6u3JgyBM4Swfaykdmnshz0qBcN:KWtIRYmIpwG/huBDIdmnsNlW","tlshash":"0032c08f6e6605b78687f212c728dd2d4441d7c4e876c6423fdabe92b90cde3c91055e","first_seen":"2025-10-01T07:54:37.229862Z","last_seen":"2026-02-25T18:20:19.457477Z","times_seen":3,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/themes/astra/assets/js/minified/style.min.js?ver=1770262649","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/style.min.js?ver=1770262649 HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 06 Feb 2026 13:58:58 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public\r\nexpires: Thu, 25 Feb 2027 18:19:53 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13056,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13056), with no line terminators","md5":"84dd278be9eb34c8ee2e36f253986c06","sha1":"80438abc2744f7e3123374b13934a84302d6b5b4","sha256":"47041653a16ca07915566a15cc8595554720974b3f27c11fc15693b87e7580ae","sha512":"10b949e4ebd8047c1e0c2309a6b189df8d18f52b9618073606168d32bb568c1c351cd950a3ea7be4b635ef21b1729365c46c9a637085cda9cbf7e72e90cf12c2","ssdeep":"384:bYv9Gy3GyPyHuzpMBzycEQysyyKOJ+dmAIBDyGeiCq2GX2UqDkD9Pybv8gu3syhe:bYvPx6H8A2tfSf+dHemQ5hdqAD96bv8I","tlshash":"e64284962340127604ff1ae6e9dfabc5327224afee0800545538dd1e29a4fe352f1af9","first_seen":"2025-07-01T15:18:28.237614Z","last_seen":"2026-08-05T20:06:14.922205Z","times_seen":2373,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/2024/03/mg-110x97.png","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/mg-110x97.png HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 3521\r\nx-litespeed-cache-control: no-cache\r\nlast-modified: Tue, 16 Sep 2025 23:36:22 GMT\r\naccept-ranges: bytes\r\ncache-control: private, max-age=10368000, public\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding,Accept\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3521,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 97, 8-bit colormap, non-interlaced","md5":"cc276efd64faea2ee181692e2f8647bd","sha1":"a736eebe46fad0e51157762c627c628ef1a862c1","sha256":"c77c01ad270be40f6cbbc17bf0ed1362227653ecc8cd507dd55eb0c73734cc22","sha512":"c64c3baf28e3a30f7b1f3e44953fc049db8f2bd557c53797a0568bf08cd06e39d6513b87cbe55cb082d3f173b1f14d7a02f5fe9080e786150ca2260cede6733f","ssdeep":"","tlshash":"ff716ca2047e3e9456f2a11afa77174d89fc08a8c69913b96ea30024034993f40bd3fa","first_seen":"2025-10-01T07:54:37.271902Z","last_seen":"2026-02-25T18:20:19.458634Z","times_seen":3,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/b7dbd2fb285d742bc8440faea89e2609/522_345aircompressortiny-1.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/b7dbd2fb285d742bc8440faea89e2609/522_345aircompressortiny-1.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5574\r\nlast-modified: Thu, 29 Jul 2021 22:42:02 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":5574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 522x345, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8aa0f8175675748656e320df76ccf166","sha1":"d8db5f4dcf0058f012c2e4b63e0013f08fe80a4f","sha256":"47cd40bb69f192b2bdbcf3ee5fcc0e007fe5c7cf5924332dcb9d93a2b058fcf0","sha512":"7d97f8f34545e444bc3942627800af8792445568f179d327648a81d7518fdf3ae9907242f5163239e58870ab1aaa61ee92f4726f32ef61b65ef25c0c5c586832","ssdeep":"96:Tf9xbzmB0w8GTtU09q5MRNA0TX2pBwDZfbkRrBNtlBVr2pyEXbH90MLY71gsuA:Tf9xbipTP9GANPTXIwDZDGBXUQELxLKT","tlshash":"bbb18e644b2c2dd8890be7703fe189e0f3e83a8199607c5457df22910070f47a3a5acf","first_seen":"2025-10-01T07:54:37.058442Z","last_seen":"2026-02-25T18:20:19.459535Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1016,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":410,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/army-logo-2852.png?resize=180%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/army-logo-2852.png?resize=180%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19292\r\nlast-modified: Mon, 23 Feb 2026 11:48:55 GMT\r\nexpires: Wed, 23 Feb 2028 23:48:55 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/army-logo-2852.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"beed6d05f571704e\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19292,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d4383012816e67a4f149159b9d1779d","sha1":"4b0ad8b26e2f54aaf79750b24d73630d18ce4fb1","sha256":"421d66dc048bc2430747d34709e608497d809da0de89866e08753afcf8463210","sha512":"24242871bc874362669e298db2a4ebab6038c477b6d1da8ac5879ec38c09c66d40d390d4f6ea05fb626401156f32d1cfcc69f6766d70e9691e38637e447cbea8","ssdeep":"384:Qs9TI09AAKu5gkuMqxVR9pzo3i29ehRCdio5lL7Ie7i4egdEezRxkWOoRlqa:ZTI09WmgnPR96DeWAElPPWrrezRKcRlf","tlshash":"da82e0c9b2c51d212d4bc1778752a74f400c8bef7e25b945d13be85a9aebf8dec84908","first_seen":"2025-10-01T07:54:37.257244Z","last_seen":"2026-02-25T18:20:19.460195Z","times_seen":3,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":54,"dns":0,"connect":7,"send":0,"wait":21,"receive":33,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/512px-US_CDC_logo.svg.png?resize=238%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/512px-US_CDC_logo.svg.png?resize=238%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11956\r\nlast-modified: Mon, 23 Feb 2026 11:48:56 GMT\r\nexpires: Wed, 23 Feb 2028 23:48:56 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/512px-US_CDC_logo.svg.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"0f35698738ed00b1\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4aa7da7fe43d99ba81a2af3f1bf1008c","sha1":"3abff295a9d54c2c6ab3339d68033ecc59dae926","sha256":"06a0c6f49e0ea218b60d0ec2796ed5183f256acf01a88f57ba45761e477bd12b","sha512":"6dfc57de9dd7139eee268ef874fe466c1d10f80cd77784d64cb696db91032ece938bf7bc82cbb41eec2b722bdbb6c1710f056397dcc6d956c9bef443b8b0b7a8","ssdeep":"192:bPWizZ4FR6jba7gFqP+1E6WruCaM7G1RF1xwIKopHr9fouxQrY0MkBaQRFonFOXR:bvd4FREba7gnx2Rc3+K1JQuKlkQRzP","tlshash":"cc32cf8e4afc8168375ef5492a81d7fe80139759a4e0b91e385370d59f32350a1635c4","first_seen":"2025-10-01T07:54:37.142081Z","last_seen":"2026-02-25T18:20:19.461229Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T18:19:51.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlast-modified: Wed, 25 Feb 2026 17:21:52 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=0\r\nexpires: Wed, 25 Feb 2026 18:19:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"MonsterInsights:10.0.2","description":"MonsterInsights is the most popular Google Analytics plugin for WordPress.","website":"https://www.monsterinsights.com","common_platform_enumeration":"","icon":"MonsterInsights.png","categories":["WordPress plugins","Analytics"]}],"data":{"size":429393,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64645)","md5":"63ec491b20b70a0c84eff6b0e4d403ff","sha1":"ca401ae2b8d9c8a540ad7cdf4f864295b3edee57","sha256":"e9db984049c59139f51f15d5ad4d7317086806a8fd32607f3362756c63fb366a","sha512":"fbc210cf3b439b635e8d69f485fccaa20557e32df8579d5365161f7aa98757c1c5fb5d49060074d2e8ebdc8455b6265768fb6e336eb368b36914a7f7da30b806","ssdeep":"6144:glwM4f2o9aj4kp9UKJkm6JuLtNdMBrrqtjqC0m:g3j4kwKJkm6JuMrYjqCv","tlshash":"2494d87065602b3931bf46c7d16eb70d6262a327e603c5d9fafb026453ca9fa192434f","first_seen":"2026-02-25T18:20:19.462352Z","last_seen":"2026-02-25T18:20:19.462352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1826,"timings":{"blocked":674,"dns":49,"connect":107,"send":0,"wait":478,"receive":0,"ssl":515},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Oswald%3A400%2C%2C500%7CLato%3A400%7CLato%3A300%2C400%2C300%2C400%2C300%2C400%2C300%2C400%7CQuicksand%3A300%2C400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Oswald%3A400%2C%2C500%7CLato%3A400%7CLato%3A300%2C400%2C300%2C400%2C300%2C400%2C300%2C400%7CQuicksand%3A300%2C400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 25 Feb 2026 18:19:52 GMT\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8138,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"69f932b48cba3f99561221059f3fc9ca","sha1":"42ae924687852ab834aa8d3cf1adf7a9085e4fbd","sha256":"2511481dacb6238f2f9907491ed795f76a004215b6185aaed01e8dc342756e91","sha512":"0fe70891b93e5cfc935ac55980c0e9b470d5e95fed56a93503ce06a0f1bf5d83078fa10a878c6cacf263e525a7cee43c95b1c628f811c552a96b200b35bd1bbb","ssdeep":"192:NRIu71xWvKoBsVUWoKvSs2wAPfvPVNPmvWK:QCpJVKm","tlshash":"75f112a2082ba440ef470dc233ce7e36af5f62112455c9399ffd1898ec9ad252359b5d","first_seen":"2025-10-01T07:54:37.204125Z","last_seen":"2026-02-25T18:20:19.463156Z","times_seen":3,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":83,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=6da04383 HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 May 2022 13:53:42 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public\r\nexpires: Thu, 25 Feb 2027 18:19:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1248,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1248), with no line terminators","md5":"a2507a31ddb4db32a0fbaa1496a540bd","sha1":"587a731f31b9e7872a735ef4fa13add962cf49d8","sha256":"6b697ee3c5b264b4bdb9ee3e96432e58cc5563ba7d7d466c0103767cc3bb3362","sha512":"5424a92f9825d9aee94e373447cbf7679fb0a0ccf829237721c3e84f240570597c627db01053d53ad2903aa4fb48e1a0d1d26fa0842c9d0df0ce218b043ad50e","ssdeep":"","tlshash":"ed211d98bf947cb303e5e27531bfe705977a20b8f0844490344cd9e90db0e812623faa","first_seen":"2023-03-09T02:28:41Z","last_seen":"2026-07-27T18:21:38.218411Z","times_seen":25,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/c4e872a0ea81d0dd378b5858a58bdf38/deck-clear-jpg.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/c4e872a0ea81d0dd378b5858a58bdf38/deck-clear-jpg.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 144770\r\nlast-modified: Tue, 21 May 2024 17:47:08 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144770,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1919x1274, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f920042c199b44ed5be22311ccc906b7","sha1":"2b2668b340608888369932acfdf3cf263160193a","sha256":"bf73a9ca883aeb605bb453c74aa3ec2fd555eda146058a1fe29b7fab422b8a93","sha512":"82b30174b7c2a41e9d487a612c05ad2fcb77b76502e2e43a350e76e35ee82a87d59beb006559260706a9890dad9c2f219abaa25fb5787d8e331a642c3200d953","ssdeep":"3072:vSvMTFMP+xcrie7P0TbQVtN8LDYsfqBqIosPMOXYbopPGkC6Fe:vPF++kieObQVDOlyBqIoTwCkC6Fe","tlshash":"88e3122bb842546053b7f75c9ec1bc1f23ea5543ab199ad46072bb4f24c360d6dc38ae","first_seen":"2025-10-01T07:54:37.092056Z","last_seen":"2026-02-25T18:20:19.464624Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":636,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/e3de82134fb403ef6e342e358bd55f75/grid.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/e3de82134fb403ef6e342e358bd55f75/grid.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 100480\r\nlast-modified: Tue, 21 May 2024 17:47:09 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":100480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1919x1205, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"57c08b44d1c6efb5e00ebb9921a45f9e","sha1":"28b948b912ddad299266ef99e5816f8dc18bbfbd","sha256":"9a408328e1d04ddc7f126f8cfd98dc44b74be22f71161aadf0c8a6d0d3084a37","sha512":"3886151bf3d4e4ada5c60194cdb45e0fd018ffba0830fbfa021dbf7cfa3826ce6a5cb9da421731dfa1dbf2a8a664932562f6f0e952098940057e4240ca4918da","ssdeep":"1536:OR9ZR02UnEG5inusyYGsJ8A+Zexh7xm9V+QTadiXIcjuUIwZHPZvTupNZzOZybfX:6ZfdMYGS7+ZexhM9XSCquHx7upfz/gm","tlshash":"1ea31257a0a5a6218dc114dabb6510dcdcf5b681fc3eaf2402e24f64631cdc1b6fee92","first_seen":"2025-10-01T07:54:37.064993Z","last_seen":"2026-02-25T18:20:19.465411Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":1207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/1200px-Seal_of_the_United_States_National_Guard.svg.png?resize=180%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/1200px-Seal_of_the_United_States_National_Guard.svg.png?resize=180%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11322\r\nlast-modified: Mon, 23 Feb 2026 11:48:56 GMT\r\nexpires: Wed, 23 Feb 2028 23:48:56 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/1200px-Seal_of_the_United_States_National_Guard.svg.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"c37ae919801dccdd\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11322,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15b435085cb341f0d77136320d9abe4e","sha1":"b901db3928b83ac6007d501947ae17303bf085a3","sha256":"731b0ef55095dbaac0443c31be8988fd49825b740e4a54d54743032665d12adf","sha512":"1474d26ea465bbd1feb83e18bc0abb5f4935100e32a8449af956def449aa2de4846a1a1f981840e4df6f501361c46303c33c4d9554c1a05a78bd3858cdf959ea","ssdeep":"192:Vf3hBZoXVLQxoYaVCIo/h3mf43KGfknP7uxWmpo1M8f7t+Og/haRhINNtfsJoelv:D3oXixoYTISh3mgtsqZo1MNO0hazINNq","tlshash":"8332be1e29cf6d737e8cfea9af2715b7a3901864438a3d07989ce46752cd01c9744129","first_seen":"2025-10-01T07:54:37.242009Z","last_seen":"2026-02-25T18:20:19.466294Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3Pro/Application/Frontend/Assets/dist/particle.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3Pro/Application/Frontend/Assets/dist/particle.min.js?ver=6da04383 HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 May 2022 13:53:43 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public\r\nexpires: Thu, 25 Feb 2027 18:19:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23393,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23393), with no line terminators","md5":"d96fc6c7610cd3fe044053973e2682b1","sha1":"67662da9a5f79b21d62caed11965479344628d1d","sha256":"841bb87075c43e9664403e7ddf3255b1cc1aca1574246be0e6b75988e5787ed4","sha512":"6ee931160a674e9443bac2f65c0d3255b195add8bf592fc17d8c448f22ef675408ba9bd3df08e18f927bb7bf4a80be977b2100c41c7ebaa16f252ab193a05c37","ssdeep":"384:xfJ5Rc78ASLy5exvWGKeJRcifMCkCbmvdjL3mvpxmwOqZxVcFB:tTLygZMCbOhCvcmxVcFB","tlshash":"0bb2b61eb3fb3db337cab1b0d9ecc012c77054e5398695b1f9ac836c9559c82129a752","first_seen":"2023-03-09T21:59:29Z","last_seen":"2026-06-29T06:06:04.862915Z","times_seen":15,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/2e516cdcda8ce9cce8dbe3dd5c5e31bd/It-engineer-testing-new-444514-scaled-1.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/2e516cdcda8ce9cce8dbe3dd5c5e31bd/It-engineer-testing-new-444514-scaled-1.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 71918\r\nlast-modified: Tue, 21 May 2024 17:47:13 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x933, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d9c556ddd134194906323e0e936fcd5e","sha1":"4e2083c7f968b08d8232641a0a1f616f28bf54ea","sha256":"dc4f4263a61c38a9500204a5936a741d99a187b866ec572e9299ce384d662c25","sha512":"958208b99b919d27a77f5bc184e0af41c137f3581ac902b70ff7eccdd7f866ecf8a27ccebcef03b236a16b5956e76129eb8c30a12edf55680527b7d6ff2cf262","ssdeep":"1536:GLyZZE4hJhWtWQi7DGcZBo/eJjhczyXsxQKf604nZ3fQmjHPlcqn:GuQjOGcU8X45wZ3fPV","tlshash":"136302397b056ba2b32da7be1cf0686e1bdda990790e7717fc6423f6319c0153c22859","first_seen":"2025-10-01T07:54:37.285399Z","last_seen":"2026-02-25T18:20:19.467906Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":1516,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/512px-Seal_of_the_United_States_Department_of_State.svg.png?resize=180%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/512px-Seal_of_the_United_States_Department_of_State.svg.png?resize=180%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13302\r\nlast-modified: Fri, 06 Feb 2026 07:06:51 GMT\r\nexpires: Sun, 06 Feb 2028 19:06:51 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/512px-Seal_of_the_United_States_Department_of_State.svg.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"b769c5dbb627d7f9\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13302,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb053c18b27c88e68a62a154c8e73338","sha1":"7006c1939f9bc7d9eeba693a77372a7b3c01d02d","sha256":"477c6bf2193a5c48f3773a4bd4036d069ce8469b14de961a6945688a21c3c3c5","sha512":"b8d5fba964762bdf8e2e4282161bd5cd606086e29054485cae1a70b095cd489a917749c1bfe08acc4c6074263a1c71c5388571d8f415ec8935fb662e9dae7d8f","ssdeep":"384:m/jCqsDdq995lGYNIa10nDLcHOoJG2VwjqhB5MQ75f:ujwRqPd6a10DLYxG2VwjAp5f","tlshash":"c252d012e3aadb52ec099e9101f17eb685353d6d9648c6bb3a1477dd09470e0eba4c2c","first_seen":"2025-10-01T07:54:37.183576Z","last_seen":"2026-02-25T18:20:19.468746Z","times_seen":3,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":56,"dns":1,"connect":9,"send":0,"wait":57,"receive":14,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/2020/12/Sequence-09.00_00_06_43.Still001-scaled-1.jpg","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/Sequence-09.00_00_06_43.Still001-scaled-1.jpg HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 184377\r\nx-litespeed-cache-control: no-cache\r\nlast-modified: Tue, 21 May 2024 17:17:01 GMT\r\naccept-ranges: bytes\r\ncache-control: private, max-age=10368000, public\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding,Accept\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":184377,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1350, components 3","md5":"948baaefb664d573f8f9c877bf62fe02","sha1":"7e42317ad7b77be5f53752dc15b4de81cf607711","sha256":"d3c5af65e362a8b8ace4faf102187ffb1d0b7c0e1b02f8215580e4bbc6a56823","sha512":"91d009a9b20f146b762d167338dc6360ed94e2467461c02904b6eff2ce2a67be908a486bb79253bc14181851a51662ee0427f71fb0e771678ea226971d580666","ssdeep":"3072:KyoEbaYyWF8pQsIc2uCLvp/D5Xj1VLHFvrX1LlF3zWu5buWLoOSplv1hMohp:MiaQFc/CRD5TTlvF3zWu5LLVSplICp","tlshash":"d40412a4599f935ae4904e7f02e8e3ac95234272f1f9bf4767f1e7e5a0c5b52580b300","first_seen":"2025-10-01T07:54:37.035516Z","last_seen":"2026-02-25T18:20:19.469483Z","times_seen":3,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/oswald/v57/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://themilgroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 19:54:28 GMT\r\nexpires: Wed, 24 Feb 2027 19:54:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:45:39 GMT\r\ncontent-type: font/woff2\r\nage: 80725\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21472, version 1.0","md5":"5f49329007f1e2c86462fd68a5f3affe","sha1":"aabe123b52750eaf9e6fe604204c2687222b0c54","sha256":"571f3457dab507b6f2ce5394d593ca015251b69fea81ab7a546bd2368e9fc3ed","sha512":"59b693cf63d3bc706adc09d289f51f3be1ed2cec80a6e1ebfaf35a5b569ed006e5785cf1faa884e133ab83eb7a0fce9c4545c512c9e7fed63e94264fb13c4937","ssdeep":"384:89cq4KprqBvQGNLahU+kaK7dWYQmQp48QMg9syZ/0TxUAWKymEIetG0pLlZxeH:8iq4cmvfNLahDK7QVmQqhw1EjLLMH","tlshash":"4da2f1a25a83d949fb68403e3b80287d963a03c733967a63575225ebbae1c53305a4c9","first_seen":"2025-09-11T17:19:09.761048Z","last_seen":"2026-08-06T17:15:01.219215Z","times_seen":13067,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":293,"dns":2,"connect":41,"send":0,"wait":12,"receive":2,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/opm-navfac-logo-1-1.png?resize=180%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/opm-navfac-logo-1-1.png?resize=180%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5192\r\nlast-modified: Fri, 06 Feb 2026 07:06:51 GMT\r\nexpires: Sun, 06 Feb 2028 19:06:51 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/opm-navfac-logo-1-1.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"4f727f8a65c6e66a\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5192,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b601eb45c99a8f72b02177b2eb810e6","sha1":"9e34bc14e00c7f93fb7077755cb609461d560c5c","sha256":"f23e98d3d8150a2458ddf2374b40ef1451c55c405f1550fd72b49056a5181f29","sha512":"d51670e7df73d727b359a9d905bd7bd1edc3e0194f294aec08d45440ef265f28d60197b2dc0a715ab0a4e36890f376c505acddfa3bec027d40c7ab0012533650","ssdeep":"96:9PT3ruy0EJpGin2wxxIYPJBzU3l49G7n1R4cv/Em60RmcG6wfIsv0wA:B/uGkinXxFJ2OGjsSEYRmcGnhv0wA","tlshash":"15b19e702dbfcbeaa1c4706520c7579dc5ed0211d1e2df27493b6c58fb2d9b42d90158","first_seen":"2025-10-01T07:54:37.170133Z","last_seen":"2026-02-25T18:20:19.470396Z","times_seen":3,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/Seal_of_the_United_States_Federal_Aviation_Administration.svg.png?resize=180%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/Seal_of_the_United_States_Federal_Aviation_Administration.svg.png?resize=180%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12928\r\nlast-modified: Fri, 06 Feb 2026 07:06:51 GMT\r\nexpires: Sun, 06 Feb 2028 19:06:51 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/Seal_of_the_United_States_Federal_Aviation_Administration.svg.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"5b0c82131fa134b8\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c621edbcf727a76e27c388c06b29dca9","sha1":"0cf4b2dd8a011b2fcfde29c008e6e40fe4ab2d50","sha256":"4fe7a90c97917ef6205fa04cb0e46d60794bb68467477b223894f4729aa57590","sha512":"53d297387be7b795a4f0784ced63c73ae6e10cf27cb7fb074e0b62463e8484519ad485a62ae4d857d737d74bfd578578dd137a4cf4ee179b05d89f6785cb1c63","ssdeep":"384:fVG3N6n0quKQD/A1DneFoHfOce12n8+Vg:tGwn0BqDeFcewn8+Vg","tlshash":"5d42d1e4af26e0cdc361bd37072d9ecaf6957ae49ea8220b24ad006cca00d640d3457a","first_seen":"2025-10-01T07:54:37.174169Z","last_seen":"2026-02-25T18:20:19.471326Z","times_seen":3,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/Air_national_guard_shield.svg-180.png?resize=179%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/Air_national_guard_shield.svg-180.png?resize=179%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7928\r\nlast-modified: Fri, 06 Feb 2026 07:06:51 GMT\r\nexpires: Sun, 06 Feb 2028 19:06:51 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/Air_national_guard_shield.svg-180.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"6240e166a2425b82\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10ab59e213e8a68810e98b8329f50d38","sha1":"5513ce594787578b423ef98285211a962eed3c70","sha256":"ef857c7bfb073b34a14885ac792112db5d4c36bc3bdc086a787d99ebf12175b1","sha512":"bb6536008de47ba1344277ed0100e3d4001a5ffef7356464a1eb71f941a27812bd4fcbdcdce7b32514d62e3ef84a5fb45f6951a81613f3d69aa64b8ad0e31856","ssdeep":"192:6w1t3BDEIyj6dSGIPYCTyDgF3h8I10E4v2tEq0I4F:6w/3BDEsdSGmYAy8j1JtZjS","tlshash":"01f1af8f1f70e730215e65ee6b58568cb1c5840d5a90aa2c3d98d89766d3028fb4e48e","first_seen":"2025-10-01T07:54:37.178386Z","last_seen":"2026-02-25T18:20:19.472128Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VC88BRD9X1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-VC88BRD9X1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\nexpires: Wed, 25 Feb 2026 18:19:52 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 137863\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":400414,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"87ca06288538f2095ccf15e4efb8b3eb","sha1":"d826ea689e8b1f68e4363e7c42aff6b6e06f09a5","sha256":"f93c9a702859c93501d25f289e193660d14d115a871cf1b443d2938ac6b2fbf5","sha512":"609ede204228facb2970e3754354cfbb58b48fd07aee28be4ff835f5f7a435de69c0a613a08c8167ff034d21ab968fcacc3917e51dc30149bc52e2f36b518654","ssdeep":"6144:WwkOidcol7Yb7XyIGQf8JlVoe9fHU+O7N8KCbDXqbHvO:IX+ol7Yb7igf8oN8nqq","tlshash":"158418cd73d670269396b478503f018ba57b69a2f84cc899f18adce42d7469a4233f7c","first_seen":"2026-02-25T18:20:19.472984Z","last_seen":"2026-02-25T18:20:19.472984Z","times_seen":1,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":89,"dns":0,"connect":8,"send":0,"wait":27,"receive":24,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=1770262649","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=1770262649 HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 06 Feb 2026 13:58:58 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public\r\nexpires: Thu, 25 Feb 2027 18:19:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":15525,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15525), with no line terminators","md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-08-06T12:19:56.095154Z","times_seen":17731,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=6da04383 HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 May 2022 13:53:42 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public\r\nexpires: Thu, 25 Feb 2027 18:19:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91528,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"077e22c9b71f278b810bc23026ffd1a0","sha1":"eb6c6878f3990677c69c8cb6471977c463427caf","sha256":"f98cd3c4b9457469cbff9dfabd0c41d8a3356917442003e0d39d0591880924e8","sha512":"c8500e00cc589b69f3e0786af4689273e47f636664c5c290e6a668afff1743c0a25fd26043092dfc50fa7ade1050ed65c93411d31cd9918041716304ea7319fb","ssdeep":"1536:uhZidebAAggKHjdzSp5ql2V+MdW36n349YVHq5kkVnJYe:uvTWqnoAGJF","tlshash":"dc93f9cdb242b436028762b6457f060bb337a954740b4918f268e4dd3d7ca9d12bbf7a","first_seen":"2023-03-07T12:05:27Z","last_seen":"2026-08-04T13:55:09.456925Z","times_seen":158,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Slider/SliderType/Block/Assets/dist/ss-block.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3/Slider/SliderType/Block/Assets/dist/ss-block.min.js?ver=6da04383 HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 May 2022 13:53:42 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public\r\nexpires: Thu, 25 Feb 2027 18:19:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3258,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3258), with no line terminators","md5":"0530d5ef705106c5c1dca16156400ebf","sha1":"35210943ed5094754d468df9056e38f99995ec05","sha256":"7747513beea611d26bcebc28dc2ea7e21b246c6edbe8b80c4d8c08f7f45aec1a","sha512":"467985b7ea59e72311e9dcb6bf4694e2b3e67fd883124ec1e8f87b5526c36eec23dccc1394d02dd8995c02d30731e1306b51b7ad1e8e1990a2a18301a2f81d02","ssdeep":"","tlshash":"7f610d54aa71297263a115a3552b8a0ce7ba0218f145c02ef9ece9ee84e5a4933227f1","first_seen":"2023-03-09T21:59:29Z","last_seen":"2026-07-20T12:57:10.091934Z","times_seen":23,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3Pro/Slider/SliderType/Showcase/Assets/dist/ss-showcase.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3Pro/Slider/SliderType/Showcase/Assets/dist/ss-showcase.min.js?ver=6da04383 HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 May 2022 13:53:45 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public\r\nexpires: Thu, 25 Feb 2027 18:19:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10881,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10881), with no line terminators","md5":"b7066afe38f284d7b41a3b4dbc7da572","sha1":"dc7e2754d8f0f547fb5243a2d276fd0b72a5ddf4","sha256":"fc6070efddf717e0c7d783e8b8da33975642ee6c44b55431f89026373bb088f7","sha512":"a2aa57dbcc955db700520f633391412cbcf859cd8a11ef0654e0a4185857039967592a5dc47b6c628dccd265cf80b240cbd63890f32bf6d510d1442a886b0755","ssdeep":"192:0k2s58Hf4VKaNKojryAoUaXy9rDafN9U+i:0W58AVL90UZ9rSI+i","tlshash":"a5223284b744253246e601b3150f9e1cebb2196cb408c92db9d8d9ee6ce784c326fbf5","first_seen":"2025-06-26T02:13:05.624364Z","last_seen":"2026-05-17T09:35:40.735175Z","times_seen":11,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/themes/astra/assets/fonts/astra.woff","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/fonts/astra.woff HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 3304\r\nlast-modified: Fri, 06 Feb 2026 13:58:58 GMT\r\ncache-control: max-age=2592000\r\nexpires: Fri, 27 Mar 2026 18:19:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3304,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 3304, version 1.0","md5":"bfe0ed8503c926d68f58ed0408dfe0d0","sha1":"0346d02d96ff7d2a0278bc10f4dfdf365c80eac3","sha256":"ec7ef7aa5fd1e019f1c26193e95e46d481d4983673936a9dda086705ada6e3d5","sha512":"633772635848323c202a2e63451333d8d9b96d58f8778232d43448daf52758df1e741747088b7b482f40ca924a20ca910c53381496591eee686d3af8a356282f","ssdeep":"","tlshash":"2961d713d7dfde2ad022a73c09955766c7f0e8518760a78761d62bb00fa6bc48fa03d8","first_seen":"2023-04-07T09:04:00Z","last_seen":"2026-08-06T16:33:07.287426Z","times_seen":9116,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/NASA.png?resize=180%2C152","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/NASA.png?resize=180%2C152 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5734\r\nlast-modified: Fri, 06 Feb 2026 07:06:51 GMT\r\nexpires: Sun, 06 Feb 2028 19:06:51 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/NASA.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"ca0faeae79c41cea\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"514c2d918ec6cae9ecfef4b23c18dfeb","sha1":"fbf2596b32400e6051c636e3828da9c4039ece30","sha256":"04a5d1e6daadc6ee06669735ad5ade838b518f8dea61be7b772aff064c58a01f","sha512":"528d8a819296114da9e7904e423ead8fdf6328914309c268a694f98997813deea5f5569785677188ab199ff22468dcb27b9bc2d8a732690ac8a1fdeb65986f3b","ssdeep":"96:y/m7r9w8gqKVM0ve3p1N/GuSNtlH7OmgwZrihB6OxKA49gHq6JNmu:YiwvqX1N/LqDJTZroBVxK0K6Jku","tlshash":"88c17d246414ac7c26dce974f4233dd82e1c76387e32da3a0c5d6e9a97fc11b92b0e18","first_seen":"2025-10-01T07:54:37.121736Z","last_seen":"2026-02-25T18:20:19.476884Z","times_seen":3,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":57,"dns":0,"connect":10,"send":0,"wait":53,"receive":5,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/oswald/v57/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://themilgroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 19:54:28 GMT\r\nexpires: Wed, 24 Feb 2027 19:54:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:45:39 GMT\r\ncontent-type: font/woff2\r\nage: 80725\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21472, version 1.0","md5":"5f49329007f1e2c86462fd68a5f3affe","sha1":"aabe123b52750eaf9e6fe604204c2687222b0c54","sha256":"571f3457dab507b6f2ce5394d593ca015251b69fea81ab7a546bd2368e9fc3ed","sha512":"59b693cf63d3bc706adc09d289f51f3be1ed2cec80a6e1ebfaf35a5b569ed006e5785cf1faa884e133ab83eb7a0fce9c4545c512c9e7fed63e94264fb13c4937","ssdeep":"384:89cq4KprqBvQGNLahU+kaK7dWYQmQp48QMg9syZ/0TxUAWKymEIetG0pLlZxeH:8iq4cmvfNLahDK7QVmQqhw1EjLLMH","tlshash":"4da2f1a25a83d949fb68403e3b80287d963a03c733967a63575225ebbae1c53305a4c9","first_seen":"2025-09-11T17:19:09.761048Z","last_seen":"2026-08-06T17:15:01.219215Z","times_seen":13067,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":291,"dns":3,"connect":43,"send":0,"wait":14,"receive":3,"ssl":243},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/800px-Seal_of_the_United_States_Department_of_the_Air_Force.svg.png?resize=180%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/800px-Seal_of_the_United_States_Department_of_the_Air_Force.svg.png?resize=180%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14054\r\nlast-modified: Mon, 23 Feb 2026 11:48:56 GMT\r\nexpires: Wed, 23 Feb 2028 23:48:56 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/800px-Seal_of_the_United_States_Department_of_the_Air_Force.svg.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"c4520feb6c8ec66c\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=26.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14054,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f173b1e7706a140207b158fe91a76be","sha1":"e3b303d4e2ce1ae42745bbdd3206798cb63ed7bc","sha256":"71f073c947d579f7a0e91f97a399dec6cd4493b9420eef41e0bcd8f5e76e8139","sha512":"655618fea51e9d0f37e4e4529cd08470844c794dd076a0145d4e3a7e19062cacb84f2c6cfcfde9aa346a7f4a194f2b6dcae503ea67e6fda15b3b74fc126067b1","ssdeep":"384:VF/bA0fpzBZMthm05q8c7eJYLOFuV0rD6x:VFTAEp9WvT5q8+eCuu9","tlshash":"b452c00fe901b172274ff150a91aa0288bf4d6bbbc585c43558db8771aeca5b0267fb4","first_seen":"2025-10-01T07:54:37.108857Z","last_seen":"2026-02-25T18:20:19.477703Z","times_seen":3,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 06 Jan 2026 14:17:41 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public\r\nexpires: Thu, 25 Feb 2027 18:19:53 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8892,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8892), with no line terminators","md5":"fb15a10a641a318f91e7e912e4f9c184","sha1":"bd41f67233facb96976ed7b8e7207d52c03d340e","sha256":"f40767552e5e94b2d5f9a65d7f640cfa7d225298023dbd682095e040809a3d1a","sha512":"49570d36e5b1ae3c3a4965f7d054258ff676326bee0d9399aa990926e9a762f699de1d09078debadc43b363ae51d740ba33f2e8c64bb223a73d3c62872ebb3d2","ssdeep":"192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY","tlshash":"b60233487946746b3973f0f6218f02ca353a24426ced6854a6e1f8e82d7858d1463f7d","first_seen":"2023-03-07T01:19:39Z","last_seen":"2026-08-06T17:48:43.299845Z","times_seen":72621,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/fbrfg/favicon-16x16.png?v=LbxdwMelNJ","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:54.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/fbrfg/favicon-16x16.png?v=LbxdwMelNJ HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_VC88BRD9X1=GS2.1.s1772043593$o1$g0$t1772043593$j60$l0$h0; _ga=GA1.1.1435851125.1772043593\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1236\r\nx-litespeed-cache-control: no-cache\r\nlast-modified: Wed, 20 Jan 2021 23:34:36 GMT\r\naccept-ranges: bytes\r\ncache-control: private, max-age=10368000, public\r\nexpires: Thu, 25 Jun 2026 18:19:54 GMT\r\nvary: Accept-Encoding,Accept\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1236,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"5b1cb220cb20c5a0cae9322aa8dab146","sha1":"5715f681cc4358a318911c5a1f9be64f4972609c","sha256":"b587a5e7fe6803a5979d97ef9d5c432d715600ff594953b2a9882c97970224dc","sha512":"fb78911db3ff71a8d588c5ece6ea5873116440acbd8d2baedfcb05cb1ae208934d4cce374686dd4debe6b3bfd60e574fdf85796f49776864336a5893773e2654","ssdeep":"","tlshash":"2b2184c299e5cb72c49722772383e080f53bd068774798d9db26e6281871b240137bb9","first_seen":"2025-10-01T07:54:37.2898Z","last_seen":"2026-02-25T18:20:19.47909Z","times_seen":3,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=10.0.2","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=10.0.2 HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 02:32:35 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public\r\nexpires: Thu, 25 Feb 2027 18:19:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":11925,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1392)","md5":"d358e30e5cdd6d7e2d8238e5fbbd2360","sha1":"7b6f06c33cb8e2410bcaac47618a10d16b34ab90","sha256":"1a1ce284e0d2b19d90c1db2b4e710340e5f73f7cc78619cd964828a2818d548c","sha512":"5319498d0f78fd36bb0257b720abdc8c436b80414dcfc26222d3a6ad30e72fae3d96c7bcf5248df5b500a97fd401f14c7ebe9b5edfec877c801d3c0ed3dfa24e","ssdeep":"192:mkgHygW0Je1ZZe1ZfRWrL41QePHX+JsoMMCHAN1BmooMBA1TBmQzqIUg:+HWfrL4tNwJalzdUg","tlshash":"fc32c69335dbaa274be7aa30cae71307f061239354840d80d2a09c66b9719df93ddf1e","first_seen":"2026-02-05T18:54:06.183601Z","last_seen":"2026-08-06T17:48:18.466527Z","times_seen":11693,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3Pro/Slider/SliderType/Carousel/Assets/dist/ss-carousel.min.js?ver=6da04383","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/plugins/nextend-smart-slider3-pro/Public/SmartSlider3Pro/Slider/SliderType/Carousel/Assets/dist/ss-carousel.min.js?ver=6da04383 HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 May 2022 13:53:45 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: max-age=31536000, public\r\nexpires: Thu, 25 Feb 2027 18:19:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12964,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12964), with no line terminators","md5":"ca78f17eef310dba8939c5b4af46b405","sha1":"1582f53b1f65639eea395587c706ac4825e368dd","sha256":"fcbad912a7693f00c9e02d8fb766d075849b5dcf067c6655158b099aa3e8aee1","sha512":"c89fc4ab57751954bf4f71ccb0a53826793c8ca7f52d694937d3a741f8f2b885e403bbfe011993d99bc04dce6f512794e04ee0f89aa6d2b68415ee97ce1dfdd1","ssdeep":"384:jsfoE9wCw2WwZ+TUJjhTXJrrjfiVYb0g1xkmaXRfakDVn:PE0YEf","tlshash":"d6424354f6556a3242e252e35a0fc90cd7fa125cf440c06ef4d8e8da88f694d366ebf8","first_seen":"2023-03-07T12:43:10Z","last_seen":"2026-02-25T18:20:19.480451Z","times_seen":8,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/afb458c6fec8619f9fc641613873a2e8/Gaia-PNG.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/afb458c6fec8619f9fc641613873a2e8/Gaia-PNG.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4982\r\nlast-modified: Tue, 21 May 2024 17:47:09 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4982,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cf1a1cdb00ef35fad0d2fbaf912f81be","sha1":"3b46b13480a7fab900ac690c5f468e6c1e3e1b1f","sha256":"c29201a64ed1d63c402e6d3b334979a12201699b070e0b264378bef28e16e009","sha512":"968c6ce3391ceb0397aba79d032d35d8b267c294c29b0460e2bf6ccd0af1e1aea3669592f123cbc6fa62f99a7674cb88b1327ad2b9e1a122b53671cfa1b25a68","ssdeep":"96:iDhITKzAoqah6cy4wqof0FFP9bFIlJLWlL7v1qa+DJQFKA/Zgd7fDAAq:iFITmAoqZcyh8FF1b5lP1qXdQFTgsAq","tlshash":"9ea17b4b6ec8b0c6d19de56121b5069d0a3eaa1077a463d3b9a0b5a894922c63e336c3","first_seen":"2025-10-01T07:54:37.197399Z","last_seen":"2026-02-25T18:20:19.481346Z","times_seen":3,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/themilgroup.com/wp-content/uploads/2021/07/1-16393_f-report-clipart-census-bureau-seal-png-download-287x300.jpg-1.png?resize=180%2C180","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /themilgroup.com/wp-content/uploads/2021/07/1-16393_f-report-clipart-census-bureau-seal-png-download-287x300.jpg-1.png?resize=180%2C180 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12700\r\nlast-modified: Sat, 21 Feb 2026 07:38:36 GMT\r\nexpires: Mon, 21 Feb 2028 19:38:36 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://themilgroup.com/wp-content/uploads/2021/07/1-16393_f-report-clipart-census-bureau-seal-png-download-287x300.jpg-1.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"cd2667ff68535db0\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58c93f2b526127a668d6dad46eebb251","sha1":"216cfd0883b92ddafdb6e52561c2293e697f0c9f","sha256":"cdea29efb3d84763ec7b3ad2871fdf6acae957e6cb582d1b06a31578f9933ce6","sha512":"fc6bdee4fa0eb93543aba13ed35a1d69be3cd14c1673c4b33e357f20f1b4f30b62002275e8ae7d7065a883e9c6ec78b9d3c80e9a75b1e2d6676e41325ab29cbc","ssdeep":"384:/BfmiVpgFqx6Qy3k53zgPEnwLp7ST6m1O3:/RFVGCs0VzgPEnwLp7STPO3","tlshash":"4442c0129771de4427f238c115eab89a2fc373a32b23261b6671502f192b4e78efd549","first_seen":"2025-10-01T07:54:37.138287Z","last_seen":"2026-02-25T18:20:19.482319Z","times_seen":3,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":56,"dns":1,"connect":8,"send":0,"wait":56,"receive":20,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh7USSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://themilgroup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://themilgroup.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 12:43:21 GMT\r\nexpires: Wed, 24 Feb 2027 12:43:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:18 GMT\r\ncontent-type: font/woff2\r\nage: 106592\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23236, version 1.0","md5":"716309aab2bca045f9627f63ad79d0bf","sha1":"38804233a29aaf975d557fe14e762c627bef76e0","sha256":"115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429","sha512":"adb0bc6cb9b230eda5dac7396a94a9a4dba9c8ba0b2eb73f5f21a20c3ca3d14651420bc6a17e67a71b5bba624f5a4e92d55cbbb898985dcca838184f6dfb2b15","ssdeep":"384:AHLaTYDpoR9l+9cJHxkGk3kbFpW88POLvFd9EDtwntxiFyLs86d975a2sfbAh:AHLKSSD49c0SFQ1wFnCajiws86dJ59WK","tlshash":"8aa2e10a0b99e00ff53655ba7504daa0b1c554b9c3ed69a2a12115c7b4eeecbf83138e","first_seen":"2023-04-05T15:38:53Z","last_seen":"2026-08-06T17:45:50.188845Z","times_seen":56557,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":310,"dns":3,"connect":44,"send":0,"wait":14,"receive":4,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/2020/12/Nested-Sequence-03.mp4","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:53.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/Nested-Sequence-03.mp4 HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://themilgroup.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_VC88BRD9X1=GS2.1.s1772043593$o1$g0$t1772043593$j60$l0$h0; _ga=GA1.1.1435851125.1772043593\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:53 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 32261809\r\nlast-modified: Fri, 18 Dec 2020 05:10:19 GMT\r\ncache-control: max-age=10368000, public\r\nexpires: Thu, 25 Jun 2026 18:19:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\ncontent-range: bytes 0-32261808/32261809\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":584970,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T17:49:27.506193Z","times_seen":17746910,"resource_available":true,"data":null}},"time_used":1152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":413,"receive":739,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/8faf9b1a48e7cdf0ee133ebcf34766da/sequence-08.00_00_17_01.still001-scaled.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/8faf9b1a48e7cdf0ee133ebcf34766da/sequence-08.00_00_17_01.still001-scaled.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 120874\r\nlast-modified: Thu, 29 Jul 2021 22:11:30 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120874,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1012, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1053d41eb3db089cfa9e0e4417b2bf09","sha1":"8e668da18b4b5f6739e5c302c18431c0becb67ca","sha256":"f70307d0d51889f7ceda9e9fb541a3a83909e6990dd485acae3efc79bc5c5b76","sha512":"3522c9e4a2a374b98820a3cac78a3e13a43c2e9818f04eeeebcab65e1c9de992bebc5f4c8a0a48fb0d6d0ab6d9a15ded65c25f4a36e5180a1db6f4ce93a609f9","ssdeep":"3072:fBWr2kpRP23YiJC7lpi7V3fv39TAFB3bZ5IvdojrH0VO66/W6h31wO:W9n7lMxXmTClojrH0VO667+O","tlshash":"bcc312ef473fa411bc81cc282a58659ff5250e689cd5b4ef4f853ec5d58920f8a722e8","first_seen":"2025-10-01T07:54:37.248703Z","last_seen":"2026-02-25T18:20:19.48462Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":804,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themilgroup.com/wp-content/uploads/slider/cache/f29adf2c7b5f6bf0beb6ebbec59a3116/kisspng-cision-logo-vocus-pr-newswire-public-relations-cision-donates-approximately-350-000-in-press-rel-5b68a4723bc080.2116129015335844982448.webp","fqdn":"themilgroup.com","domain":"themilgroup.com","tld":"com"},"ip":{"addr":"209.17.116.165","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://themilgroup.com/","date":"2026-02-25T18:19:52.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.themilgroup.com","organization":"The Millennium Group Intl LLC"},"issuer":{"commonName":"Network Solutions RSA OV SSL CA 3","organization":"Network Solutions L.L.C."},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:53:37:66:BE:F2:D7:FF:D3:20:A8:1A:EA:44:DC:DF:9A:55:B7:73","sha256":"3C:16:26:6F:76:9F:2A:78:EC:18:75:99:87:A9:8A:4B:FA:94:50:60:57:3F:00:51:65:41:84:69:B1:07:72:D4"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/f29adf2c7b5f6bf0beb6ebbec59a3116/kisspng-cision-logo-vocus-pr-newswire-public-relations-cision-donates-approximately-350-000-in-press-rel-5b68a4723bc080.2116129015335844982448.webp HTTP/1.1\r\nHost: themilgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://themilgroup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.1\r\ndate: Wed, 25 Feb 2026 18:19:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16140\r\nlast-modified: Tue, 21 May 2024 17:47:05 GMT\r\ncache-control: max-age=10368000\r\nexpires: Thu, 25 Jun 2026 18:19:52 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: \"1; mode=block\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-webcom-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16140,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fdc3d127919f7950b17394899d1aba3f","sha1":"7a0aaf6dedf70d768247c2e9d017e955ed14d5a0","sha256":"dd00a6629ca6e1135deded956ef1479f0911b4a1c17428af0ad0dfa2c8c96be8","sha512":"df67e784178667273068b96e7b7e8d4d38613a203763f104fb87a7e831210ad36530be0de83498e3f56ad8ac4b72c472e468d6a917263b66f743f7c52a7a114b","ssdeep":"384:4gpZemnUVdpLRfyJYz0/j4pyPz0ZYduswH:jerVXLRfyhL4EPzqYQsq","tlshash":"9272d080beb7c242619f9c0798973dd9e4265d79ee015083321e348adecdb59e7a4398","first_seen":"2025-10-01T07:54:37.280613Z","last_seen":"2026-02-25T18:20:19.4855Z","times_seen":3,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-25","alert":"Phishing Block","trigger":"themilgroup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"themilgroup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}