{"report_id":"3f6a5417-4dc0-43b4-82b7-6f32b2854051","version":0,"status":"done","tags":[],"date":"2026-09-09T19:08:52Z","url":{"schema":"http","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":0,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"title":"Cotopaxi – Gear For Good |Free shipping","dom":{"size":528758,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64298)","md5":"74f99e54d959ebdc74886cc916a93ac5","sha1":"4a5252591dee8fa643de1afe4efae7801d64bc64","sha256":"13befdd836ef548746a40b2a0e916db2353ef0ebbc2072b3fea1938b9c3a1e1e","sha512":"0d73bd6b9fc244999b1801940756e9a727f536d066f9ddf3ea05f1f740eb7711dd1e95afd57924705f98a722f293b08548dc4646125e26e48d4de54d289a38ac","ssdeep":"3072:piqMiu54QN64VjAhAWfAiKGjMmeaAe4plOmKNmM/6hbBG7BH7AXqYTpS:IKQN64yKtKj2sws","tlshash":"a6b4e892e2f0213a22afc3e160a4ff8ab4569513c5c955edf3fd625c87c4f8136a660d","dom_hash":"domhashf16ad138f778542d1bdd122a7386702b","first_seen":"2026-09-09T19:09:10.676041Z","last_seen":"2026-09-09T19:09:10.676041Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":0,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T19:08:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"www.cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-06T22:44:31.282543Z","alert_count":0,"request_count":1,"received_data":434841,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cottoqpaxi.com","ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"domain_registered":"2026-02-14","domain_rank":0,"first_seen":"2026-09-09T19:08:59.590119Z","last_seen":"2026-09-09T19:08:59.590119Z","alert_count":310,"request_count":62,"received_data":6265607,"sent_data":42611,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WooCommerce:10.8.1","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Elementor:3.32.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Magnific Popup:3.12.3","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"www.cottoqpaxi.com","ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"domain_registered":"2026-02-14","domain_rank":0,"first_seen":"2026-09-09T19:08:59.585048Z","last_seen":"2026-09-09T19:08:59.585048Z","alert_count":50,"request_count":10,"received_data":8528596,"sent_data":12644,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":4,"received_data":175796,"sent_data":2272,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":2,"received_data":124477,"sent_data":1275,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc06080ebf979384eaf92a5f1cd7a50b","sha1":"1474b07026c758629a82df51a5e4fbb7abf531df","sha256":"c50a0b33030ba0ec063be642c297f48af94359e2222ff140817248d591faf837","sha512":"d6443028105566717f328c56d17a0694e13905aa008bd36ba744e76bc5181e854ab80563be1d3167d728bf5eba6c502d7e36aebf0ed74504c88e47125cc710aa","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFX:qNdi7anPH5FL736ePkP/","tlshash":"fc62e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","size":15315,"data":"","first_seen":"2024-06-19T04:58:57Z","last_seen":"2026-09-11T01:26:14.344132Z","times_seen":153991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"473c356dc1375b89a89396fdabc64357","sha1":"dc6f1a64100bbd009708a9ec40244abebe85c4d8","sha256":"a60e22996b3d94aa0e93c90794942d627d01e95fb3b144ea833d60c80fa803cf","sha512":"3338f5d0a801b88532ad3b764e46b3359e408c9b4218cdb7112659f1ea73139977024bf118b4bff06af0ee938a8579f6c7f8a21ebf94eed548607b62397e4249","ssdeep":"768:Vj1cI21yHLRd1M4ZBOh0hbuNFXCz1k8MtJR8RjDKv//Dpl1XkLVgbpM+MpKEnzBv:3caRd1MMBOhSmF7tJR8RjD8/mLVliEnN","tlshash":"36e209523296d4a2069f48a3f4331119f3769dd9b80af095b2bcdce6a471f877362b34","size":32362,"data":"","first_seen":"2025-10-05T16:15:06.575149Z","last_seen":"2026-09-09T19:09:10.687916Z","times_seen":11138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/vendor/magnific-popup/jquery.magnific-popup.min.js?ver=3.12.3","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b3beffc919a3e5fb7d02583fe6f0d97","sha1":"c7f8f668a2526941ab41efc48c0e98842681ac17","sha256":"dd31c5bc6367493b17a8e0db4f210a9557c5faffeb0b5614d40757ae12e07859","sha512":"1b8b9e42ddb5e7a4e22044f6f1ba948f5c42a37d6e65aab01558283a90c8cb4651d5af7c4e135c92e7a77927defce2516dd99d537200d3c668c6b04ae9087094","ssdeep":"384:oK+Ypwhc1sBEVEtk94tBnKIO46FbUkOK/NF0Sv/lZzZyQtdhTZF5ZFZ:oEl73MoUkOKv0GMAdXF5N","tlshash":"79922ba4f161b27397e361b4188f382c367a9922cd078412b65498d4adf8fd89237f7d","size":20865,"data":"","first_seen":"2024-10-11T08:31:24.959538Z","last_seen":"2026-09-10T08:14:41.092816Z","times_seen":413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"72eb1956360f5004a29da0f6f1a033ea","sha1":"0f2c01d0754aca3c7444eb85ff4db7c8d3f36c78","sha256":"d45d464223e8979c4ef8a378e026fad3a4bcff556fab4a1d611a24347b833674","sha512":"8be94140f0240d384d7ec2ea50c9f86144048d84126dc1e85b7c5d3fcf56a8b90db08c31e5200fd61807c68f8e93b4a850751d67fc116744389118cbaa22ae50","ssdeep":"","tlshash":"f41112267205e532235161f462ff514a687e36331e83c0b19910dc92d5fadc8a135fde","size":1062,"data":"","first_seen":"2023-03-09T05:01:38Z","last_seen":"2026-09-10T19:56:25.378854Z","times_seen":289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"98c6a40496f8300d3f5af9f3629e6760","sha1":"85b0a3986461b3dd804a213cce85af0f1f28dbb2","sha256":"77047b429d1eda963658cea5bb2bcfa9a1781acaf4c0c20a6f8a5197aa07785e","sha512":"af609f46684a7b725869aeb5bf1b56ca0b217a85e46deae083e50f3bf7cdc94ca28ab1c1ee382b3cc1b665c00c09d7eee04f7acdde5cc80d6bbe045b7ea17cc6","ssdeep":"","tlshash":"b9d0a79605992d8352dcaef00000283234b0e217f6a108002b1cee6c3239dc3de10147","size":213,"data":"","first_seen":"2025-12-04T03:18:02.14796Z","last_seen":"2026-09-11T01:25:58.343656Z","times_seen":10700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc85d5f356071ca03f5be419420bf940","sha1":"2871bf18351b95eee7669053a22d2cfcc8468a0f","sha256":"f2a62f1c21d59a49c285953cee06cffe056a0f7ffdfddd8fd538b18a0f25eb13","sha512":"5ed05c4ede3016e1f4ea69899b8298e1c1c6dd450013361971cf874134fd12f9986431f4df98519cb54cd7f1e8611b4cdb46104f0a0931192a6ff198fd738d64","ssdeep":"","tlshash":"74f028cc630c4cb5289b35952f3eb21275e871d7ec5a8cf2dc6d510995b8ea3154cc54","size":642,"data":"","first_seen":"2026-09-09T19:09:10.730975Z","last_seen":"2026-09-09T19:09:10.730975Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5f8a2c066e15b3948b9f18266c5d1b6","sha1":"cfde1ceaf6e348141f6be35bb1ae573ab98429f9","sha256":"9811465beb1593bf2aed14735edc05dfe2b54a732b7589ef262b4489167001ea","sha512":"203ab30f9f941a1cf865cc245110d0904e7a9eaeceb596f1b77f7314860c9192fcb0cf3c644b352f848cf4165d36fbad777afe9e1a2e239c440ee8ea92abf1f1","ssdeep":"","tlshash":"c290041401dd401d50cf150cfd5040474575734435507441153d1d10007d04f510f15c","size":45,"data":"","first_seen":"2023-03-08T01:11:21Z","last_seen":"2026-09-10T22:52:14.567841Z","times_seen":735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb723d749493893fef00de4a102d5b14","sha1":"83e4d476c5ce53d9fd2a5f07a72db8395c5be20e","sha256":"5025f2112d7c4786e6cdd0d8becf512b1a989a81c5f37fa072c3ca944ca9211e","sha512":"bac6e6754071aa4499cda15909e69619377a5f862a69a99ad4b5577143b8bcadac6ddafbd243f0754f6602063c5bc3c629027c5f767c90d71861b7952764d479","ssdeep":"","tlshash":"c411ccf3b7dd907fba9e6d66593402cd5a1d90735c110a5bfeac3575cc8442534b1d40","size":913,"data":"","first_seen":"2024-04-17T16:07:41Z","last_seen":"2026-09-11T01:28:10.753144Z","times_seen":41392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d54a821c4848222c68e8098be777a970","sha1":"2cc724331743c835bcd2f0c1c2490b508ce8ee24","sha256":"f8d2649eb2889b67c9d2681d4ab8257dd697dc11c1421673b32d088cafe81dd2","sha512":"3c6d0af6078448b5a865d106bebf2abd496c05b5707733f10b0eb29127f0db9f37162bd076bbfeff74595898edba5264b0b53d149986df679ef1899a52b49a96","ssdeep":"","tlshash":"6dc04c6b774c19e5124739d01f9f62d53839918876517c118caca905d49089a6d06f9c","size":147,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-09-11T01:26:14.670134Z","times_seen":25704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"06f019a6ff09db6b297570940eec1d5d","sha1":"872efe186950ce534aad341e7030fe24f7c672dc","sha256":"53f829ae556bf7011727483015d83a98bcdb4b5796eecb728827c1282c971536","sha512":"0cc41e9797501e654a2b51a1adba4d3593347ada90e0dbdeea3ee89345415ab192007ae9886855447d472d814b8945fcb680ae7fb8942d17af1682a33236d633","ssdeep":"","tlshash":"5be07dfafd5b457101e7a1237bce739e293275a3e92a4c402889ce806c38dd31126dd1","size":325,"data":"","first_seen":"2023-03-07T01:19:13Z","last_seen":"2026-09-11T01:53:43.577149Z","times_seen":21808,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1865563ddc7858ad8f5df54bf0d4f3a1","sha1":"8a1083151ffc79be34dfadffdf09ed386708adaa","sha256":"ed40e7c01da10e3ce3b9b6781f996cc5cbe8886a730390f8d973e361815eca8e","sha512":"e847c80bd60b06853be9b227fba7dc9aaecaf1bb86c30d7acfa880ac53a6147ba9edec4cc115fafdeb6008a33e7e4a4164e13d763f8e7509d33980aac7638837","ssdeep":"","tlshash":"60d0a91002d22e0176db8ca290218fa8b0fd92a0d1d4f08daa7c464862e6a1a1a68209","size":220,"data":"","first_seen":"2025-12-06T06:58:10.775603Z","last_seen":"2026-09-11T01:23:46.465687Z","times_seen":3347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"26f52a94e0af89f05b3bc3c57dc04a9a","sha1":"2f9081fef1caa8e72c3b76bd2be4b44c5cc3691b","sha256":"bdd6ecff6f2d10eca2602d51131e4afbf2d689790be6eb1cd6ab497ba15650c4","sha512":"724efbbda2d21e65bb15c1ab5cdc798046f76cc51899d411dae796d2452f7366a55923db07ef17a84066df7e12ebfc35594a9f09c7c7de0a24506308c68cb120","ssdeep":"","tlshash":"66d02eaaa39eed43a3d66ed8200239f270a01813e68e989cdac8bc8c1710881ca0401f","size":261,"data":"","first_seen":"2026-09-09T19:09:10.734296Z","last_seen":"2026-09-09T19:09:10.734296Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"68770eb1c434fe835854ec100871a867","sha1":"6bd3a471948e812ff5b8f5195e51992bb82d40c5","sha256":"e8ea904fe9388a0f548cf81954d2fc3f9c404b693b3f514f5bc27cc757edc401","sha512":"d256f6740c4493cde63baf95762fe4ab34f9b3fff7a58fda2377155c42a2969eb02e3cf7e37bc7e99e9af0dfa452f2c65d5d4086cc60a1531afacea36e10b441","ssdeep":"","tlshash":"18b02445cfc05d3303d1fc00403100f4c154cc045145740447754000437714c03fcd0f","size":120,"data":"","first_seen":"2025-12-26T16:23:11.6677Z","last_seen":"2026-09-10T05:33:05.199644Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"583a139399fbda86c3d1efd6e8cce294","sha1":"280aac06f1d4c8db07ee17dd7fb6ecb80db0367d","sha256":"d790bb85dca26e2ee0319cd6502f6a5198f68f4d4cfb9e2009250f65c18fd91c","sha512":"418263c7c53ce7f8484e7eb7e21842d4394a30db8a21901450d82ce4f82303cf22673adc5b5b6b70022ce37b260728cd35d030bfef2994452ad78558a9584a8d","ssdeep":"","tlshash":"ac019412af04a836f7c2801150a89bfc32b703baf4c0402dd3ad4b6cd22cb81e0c2a0e","size":731,"data":"","first_seen":"2026-09-09T19:09:10.735846Z","last_seen":"2026-09-09T19:09:10.735846Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"87bdece55ed081add467786161d48845","sha1":"84c3fea909f8c4ea83478decdcc32115c40ae5dc","sha256":"38a1cba698c85473a3ef3abdc04ecb0f32110e14015216f47c5b3c3e8f2b27e5","sha512":"d85d9d4a013954200c5ef999e0a702fdc6cba90f434bf6e9322c7b0e0d51cb2e9827679b654876c0f95b14e6bc5c098abc44f70a4da8520a58f6b5eb9b8fc6f1","ssdeep":"","tlshash":"04b02b429549cf421797c456043e01b126080553c1c3cd4086a8684d0030383fc90400","size":124,"data":"","first_seen":"2026-09-09T19:09:10.736822Z","last_seen":"2026-09-09T19:09:10.736822Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e6ec530d8279139608fb81d1414a128","sha1":"c819dff3a6b5e2315f6c9e13e82a5ebc3d443e59","sha256":"e5369ac89cfbc51b5d0c0e5755ecc70432c2f604dfade37564beef5a804b5584","sha512":"736984906de29661209479b79a1eae14c76499a88b77943aa1c03ae2a84f98fba2cd7786c6926af2019c5b57f1cb0783e3a9dab6283fcfcb824508d8af9134fe","ssdeep":"","tlshash":"a551a221ba055e7f87e39bc13913bf07687c0a219081bda9f4fd486d14f6e692207d5b","size":2627,"data":"","first_seen":"2026-09-09T19:09:10.737775Z","last_seen":"2026-09-09T19:09:10.737775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b479aeef49a748a2536c1c94736a3b65","sha1":"b0baf8b3a44156845e0c5772b9adaa849332bec9","sha256":"91a5176ecb8ddce9f706092865ce4ff9ffa120f96a94b387d2904ac2bb4cf5e5","sha512":"2112ff67265a52e787056e2f011bbc138e9222d1f777f97020db6c928c7e4e06e987b877333e89e53ab35312beef68e732c6337870a1617a4d566049bdf707fa","ssdeep":"","tlshash":"6bd09563254d0b8237f41fc53008f757409865b1d481d54c4579e20d0970987535442b","size":253,"data":"","first_seen":"2026-09-09T19:09:10.73864Z","last_seen":"2026-09-09T19:09:10.73864Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"913a222ac68dc1579d055e0ef3bd2d09","sha1":"aec0f9251f72c9c8c26aa44288ea942de190d1e3","sha256":"613f68c90b9ab3a0182716f58639dacbae87cf433cb0889705f5087d1c918c63","sha512":"ebb368c32a5d0828f50c13df93f2bff74efa45daf2eb66e28ae8cd4518fea13830986c76751a61d956ce41bfd8f4891422eed0130ad807ec79febd14a5e5324c","ssdeep":"","tlshash":"f1c02b778bc50f828dd05dec606763b300bc3033e8808e8c0e5ef1440424a86cd0040f","size":146,"data":"","first_seen":"2026-09-09T19:09:10.739628Z","last_seen":"2026-09-09T19:09:10.739628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0154058f1e733cbd2fd9cff9e64211d","sha1":"6a09acd337eb9cdeb4473f905d1f5a76da1d7101","sha256":"a2d47d41b711d4dc6e6c737a5a4dde3b50167b180a9e4b60766fb5f50ef200a0","sha512":"8c70c1bcf44a839543e457e00a7918eb211aa560f799ef92077c3bfc51ba7093373e36398d1a6234383b569c47735adb6e2451552aec774fb91622b89ecaca8e","ssdeep":"","tlshash":"a9e0c24726f85ddb6bcb7c811421a5b721206553e2584c907145a8b40290e42aa44e3f","size":304,"data":"","first_seen":"2026-09-09T19:09:10.74053Z","last_seen":"2026-09-09T19:09:10.74053Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"af5610a000c05e47db7891d8524e991c","sha1":"10669c2df8d9dd10bd1e11eb9f90f0ea5e5460b3","sha256":"401dd91371ad82deeb6324f56c16b46bd9d8f958a0b7de388a20dc526551b878","sha512":"cbcb7f1160b6c99f742dd54c03cffca143e0a34a81e84ddd3712d682184ab3a638c6954741bd10d20f41a96d6be9bb7e7a6944a2b5dd70d4930b701af0d0a63e","ssdeep":"","tlshash":"5a31108f639a49acf9212e5fe563f06976f84f2ba3fd1f8924d7690511f025f20410e8","size":1749,"data":"","first_seen":"2026-09-09T19:09:10.743159Z","last_seen":"2026-09-09T19:09:10.743159Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed844a75bd2d74e3b64454dbfd440ee2","sha1":"4752da699b014fd519214fdbc6a93a3d6001edee","sha256":"4e33012a7e35a968355090bea6b8f31ecbd88b9d1660e76b9908d556d9e640ef","sha512":"d7dc3acacf33b697d0841f92473f7e508e0cb2cb9458f836c4bd972edd35449ef2a50c850588e8c69b3748b56870d79a36f4574445cb5394b5631950a6dc152e","ssdeep":"96:B87AtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:LsNukQ6jq9OVM6MeHGlQTvog02","tlshash":"47c154941a54fd2b21e135d9e41b9734663ec0333c1afdc1fa21dce955e8ed183aa531","size":5707,"data":"","first_seen":"2025-10-05T16:15:06.677014Z","last_seen":"2026-09-09T19:09:10.685424Z","times_seen":11031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b0e51ea66f635185c33794622ae99e5","sha1":"4cf69c28e752122dc5f53770043265a1ec06c4ec","sha256":"d21670e3126d50e07f581fb3ef34b2c33cf9891a0011a502a6879bdb3f843089","sha512":"13bbefc216990339886ae3e0ff29145d8260aefa865c2e7ea469f6bbc6a160200b08607b5fb8a0bd767fc10508dd087ddd77259b27fc56ad55629b56e7084508","ssdeep":"1536:ZGuxmDuqHrrUN3KQ5RSSYeAjA6c9CSTwk83FKm184cR8+esOAexXKh83YNQAzeLB:26SOEAu","tlshash":"8743e9863652f4b70beb44dad03f450af25708a4a40da4d4bfe9dce594b0d8a133bb79","size":59579,"data":"","first_seen":"2025-10-05T16:15:06.664289Z","last_seen":"2026-09-09T19:09:10.703111Z","times_seen":11034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"517e5e839d61b386ed789afa6f88d012","sha1":"47e3d68ab565eb5dd31243ea5885b81665b1ff4b","sha256":"cc5b9255896ab5888ca072033b2cefb9df01b633374438881c63c245da7c7c65","sha512":"04c5e9bdfcc8f7288788864ba695fc881db86c308bfdd0fead00523ac8aeafc495e9b7b9db2d2f37f5fd7c1eddd280f6a9a8d78f59d46ac95b986f613882cd4a","ssdeep":"","tlshash":"0f31328f2bae08ecf5266e5ed053f07972fd472be3ed4e8921d6685541b069f20920c9","size":1623,"data":"","first_seen":"2026-09-09T19:09:10.744105Z","last_seen":"2026-09-09T19:09:10.744105Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"83101b04551ce545c2f0d33496e48e7d","sha1":"dff14dfc221930eaedab0fbb5641195062fee818","sha256":"0714c975f412a931be2d6e8741cfd8a4c31d7ea6898195d5d77b72623c2d5c95","sha512":"4dcf142588114cdcfaefab429a9755a747c6aec9c859a30000d3b7046a314524f8ac7a3e1580c706c50b1d3b3eb06c775d9cc44eb45c74a501d53857a261ce5d","ssdeep":"","tlshash":"8e31268f735a49acb5322e4fe153f16976fc4b2ba3ee5f8924c76c5041b025f60420e9","size":1714,"data":"","first_seen":"2026-09-09T19:09:10.744909Z","last_seen":"2026-09-09T19:09:10.744909Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e1aa0982918df95af697e9c9ba2c507","sha1":"3f05e50670d1595e6c65d433d2ef3ea20f2dfcb3","sha256":"a30690afda34476e519ea837a6b4a884db56df32a4292f4a2f38b929b3121657","sha512":"f5fb19f5c5299ea2fec1fbae1deb202475e1d8726db3cb88be3f74bf19c5aab0ab301241f58c9a8f25346fbaabcf42d10331634080e1590fe36f9392b51f3b9d","ssdeep":"","tlshash":"0a31279f736e19acb5312e5fe053f03976fc5b1aa3f95f9820c2ac5642b026f60410d8","size":1630,"data":"","first_seen":"2026-09-09T19:09:10.745881Z","last_seen":"2026-09-09T19:09:10.745881Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18224765890","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fb85e49f51940ab91474265391a93e9","sha1":"fa7614c2acda6cedba0eda1a34ee6a9a15fb5964","sha256":"b836ca6e8e2bbe3a8a7a4a17e2f188eddad3f3b19d7b069eb7167ef8d1d71349","sha512":"3456af91667393b8281c8df25d7dfb5a60f9d84737b07ff1fa468b6b7241e0915c1da98cd64b17089cc38b9e6745a41889e2a931b0732095d524d3e447e8593d","ssdeep":"6144:g3ja9+AJpPkXj7y5/2gp9hepcYR/ZETH3Uztkgx9BFhOspyCZ:30AJpPkn8zD+PlDOsN","tlshash":"78942acdb3d670629392f674503f018bb27a79a2b84cc899f28ad8d42d3465a5173f7c","size":434237,"data":"","first_seen":"2026-09-09T19:09:10.717258Z","last_seen":"2026-09-09T19:09:10.717258Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/js/happy-addons.min.js?ver=3.12.3","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2676c6f993a69845c161ff62df319482","sha1":"f462f731a86ba1ad065bd5711b18a629d8cb4934","sha256":"815201c7ac9a8b1322083d778493585a21846f1a34ae3843c146f61bb7cc8910","sha512":"960274a07e489f725bdc952cdc6f50e8abbf8bc700fcb56ea074fccd8ee3ec397dce5861cf92dee6424463bb72c3b3283b3464fc0865d9b52494d878379f1713","ssdeep":"384:UDKhQFSdDzrf2BOeWL/pf++B9IjKo3qHAPAmZQmyR6etFw6vc1Cgqnzss4yV57NW:UDKhQFSRzrOBOeq/ptB9IOmqyAmZQBRC","tlshash":"06b2d645755874f510ef313fb0aba20823325c7a8a0e9556386288f84fbddd42b67f7a","size":23404,"data":"","first_seen":"2024-08-29T22:28:04Z","last_seen":"2026-09-10T08:14:41.093499Z","times_seen":275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","size":1720,"data":"","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-09-11T01:26:14.281767Z","times_seen":157552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-09-11T01:25:19.79474Z","times_seen":200433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-11T02:25:03.147603Z","times_seen":1053433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/woocommerce-js-extra","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4871bd317ddec760b71fb321ca40fdfc","sha1":"718b7c526ee838f133765e3976f3d752e62605d6","sha256":"ed13f456d70c5ba46ac8664b74d23f4d3667d2676203fe5f8902f9b08bd0fb4d","sha512":"61a9857ca05c5c3d5d2414d55ebd7011a65bc57138b39d8a724174b335156e2ee64b5c6c0c54d2128f7aaf7dbda06458d839a43f1f07436156f2c497b83b72d8","ssdeep":"","tlshash":"e2f0a796c5992d8392dceef00404283334f0e217f6e108002b1cee6c3239dc3de10147","size":567,"data":"","first_seen":"2025-12-06T06:00:58.9924Z","last_seen":"2026-09-09T19:09:10.747309Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wc-add-to-cart-js-extra","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0641fd237eb9522030f377c0f3aafa3a","sha1":"0cf39abd036da69d382f77c616661e8af5a07e68","sha256":"aa54e1781fc4015259127e0c4a1778a2f63f7419c4fb5a1646128aabdbfaa4fb","sha512":"a3ababe37a7df3338ae054390ffc3489716d799d16830c9e191a7407c9c7bfd04e194b44506d4f0d378e379cb586f68dd079b013951cdb8a600488f3956a19e0","ssdeep":"","tlshash":"1e512b96d39edd4393d66ef8200535f270a01813e6cd985cd9ccbc8c1710881c90401f","size":2999,"data":"","first_seen":"2026-09-09T19:09:10.748137Z","last_seen":"2026-09-09T19:09:10.748137Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wc-order-attribution-js-extra","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1728174b7212e18e088ba4a8d24a26b","sha1":"c8b14e95ee8cd82313a688dc2406737762e036df","sha256":"317242f100a9066e07fd79df7931af671aab346848fa2d37b02d8e5a2fd33ba1","sha512":"e69d21fd4d887b0ce43795d0a426d800528cc8891ddabb6fd2632eae9c123e8cb70e19211aa66593877a7240e7a13dd50748d4ca715b3b99a808b24de1fabf5a","ssdeep":"","tlshash":"f8717612ee04a835e7c2803150a85bfd32b703b6f4c0401dd3ad4b5c9268b81e082a0e","size":3480,"data":"","first_seen":"2026-09-09T19:09:10.749032Z","last_seen":"2026-09-09T19:09:10.749032Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/disco-plugin-script-js-extra","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91ac2b100494684bd86d368140b266bf","sha1":"31447fc13942379810002e7490dc82e5ac81d40a","sha256":"745e9eb70e0b27ef9a74ba27091677479cb464b20f4843be33435ffb3e635406","sha512":"ce7a4fa79afa8f64a475739d6171fbd0e46693a6edba96267259898548099027d128765540202ecc144b5974c6f0cc43c1cc489826a4707e0fdae9bb72a750be","ssdeep":"","tlshash":"66512b42d549cf421797c876083e01b226080553c1c3cd4086aca84d0030383fc90400","size":2878,"data":"","first_seen":"2026-09-09T19:09:10.74978Z","last_seen":"2026-09-09T19:09:10.74978Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-11T01:28:10.635436Z","times_seen":53095,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7fef64148c7badca6a6a06cc81dde5bc","sha1":"d1aa508f8d72cb3bd13d9301a31cc255727485d4","sha256":"4a1851407fb32e4c4f9fac5f32aa40e4159da93b31cf61ac3f35ba1317e3bd91","sha512":"23a1d34bd4635b8f1e843b8850955211a6f165928e16b61d465b85e765070f001e5587ce7cf7eb492b09900ff12e09c6131bb49cf93524eb1c2aef3ee20c2fde","ssdeep":"","tlshash":"f231f08f37aa59acb5212e5fe043f02a36f85f2aa3fc9e9920d76c0551a026f60410d8","size":1725,"data":"","first_seen":"2026-09-09T19:09:10.75193Z","last_seen":"2026-09-09T19:09:10.75193Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"591020cdcde703cc78eda2d4ac7758b9","sha1":"74cb383945c0689d67a3bb51d039ee2ea4a53e89","sha256":"5500752026f90e3330c4bb13c3e422f91e1e1131e89fda71060da01c9105fc1a","sha512":"0769cada9919af7c9c3d1ee7e2741b17b8b07cf80310ff4231a69bf981b4ebcf00fb679b69d5c0db7779e14615393124f9da4df7657adaaba2812efdb45a0536","ssdeep":"","tlshash":"ff31044f674a59fcb9367e0ae143f06975fc9b2aa3f88e9925d76c6410f126f20404ec","size":1598,"data":"","first_seen":"2026-09-09T19:09:10.752707Z","last_seen":"2026-09-09T19:09:10.752707Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-09-11T01:23:46.4419Z","times_seen":349578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5050,"data":"","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-09-11T01:42:01.070374Z","times_seen":28425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae52867db002b2f95a21b85b3b518a04","sha1":"4b1615786f2e5240bec4229c7dc5c6f865c92ebe","sha256":"592acc60b8eea94fc366110175d8406604a609201d6debe5eb008a6debfbdc3b","sha512":"cb641d54680e78ff8f575ca1746319f42acba15c3422bb40f011421545ac0647cad018635834fc9ed553c7a61e0789d329c18a774d1dcd5fdb52d207e69768cd","ssdeep":"","tlshash":"7551321fb0208e9618b3187e613a719622329d69f2098670a015dca42eece4b1777dcf","size":2939,"data":"","first_seen":"2023-08-09T19:51:14Z","last_seen":"2026-09-11T01:25:58.295084Z","times_seen":64286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c716c7ca8e115f42b8cf9b56e47059a1","sha1":"108629ca2b57c2aefe267369a14ff33bf5f3f40b","sha256":"1041bfe58302b006d1db0b545fcf851ba8e8220975ebf4686d2cdaacd0656e87","sha512":"290cac96b6c22f3e59e41dc6cee3661f7da90b507344b8c19bcf2481e2de8f78fdca02a959e136c7135cfcf3ce5b41e6660692be3157782f87e7f3459122fbbd","ssdeep":"192:DwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoGg:kHzqxOPV5lxodXLfpvD/NtakRhPZT8ck","tlshash":"5d02310a34c1982db58b58ba3532432866a8014de1018f6db1bf78fb85a6d82377b7f1","size":8525,"data":"","first_seen":"2025-10-05T16:15:06.578247Z","last_seen":"2026-09-09T19:09:10.714706Z","times_seen":11786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef56117d1bb5cc41aa6bd127a49c7640","sha1":"b9c2ed774177fc0fceba5cb58113024b23fe4fb7","sha256":"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620","sha512":"0ec9039dbb47470815ad8bf58fd206672717a146b3a99bcb12444687e8489698e06664e6c6cc38a5d2954fa919e5a6c3bc57e44f3be2655f92b801bac43ec763","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMP:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovp","tlshash":"9f12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","size":9636,"data":"","first_seen":"2023-08-09T05:33:46Z","last_seen":"2026-09-11T01:26:14.332611Z","times_seen":178671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a816ff38bdd095e2118365ad4c618b","sha1":"c58ae69eeea5bf2846b88a6c7cbaaa7728a2444d","sha256":"0eb862a5891526d089b727fdfa30222cca4b4d75b5835727bf57df17436256f6","sha512":"b6650185967270b09fed48ef9937d21ae45b37010aef6b6a6a4ce3efb295bd39d3734b1cce7535e126cb255b1a3b40c27dd97322f1b70ee0e1c67163e2539cf4","ssdeep":"","tlshash":"41418335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","size":2439,"data":"","first_seen":"2026-02-05T17:32:11.552459Z","last_seen":"2026-09-11T00:55:25.071125Z","times_seen":46551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/elementor-frontend-js-before","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"caf3bbdbd20f25de3c047072e38fd72f","sha1":"5a31cc72ddf281d2166306cb8018049f6c2017b5","sha256":"84978ebf1c9830f62d3a0f4f92c70a478631d8e4719315b5c9db8d7898537fa0","sha512":"5fe0aa2a09330d85858fb62c87605d23c0c396efc524b89191a71bd770ec37e0d9972cef97f7718fb7d2f213b0c4e801aad44fd5fe9aeaedfb4a76f91e9764d8","ssdeep":"48:a4AFkPuRv/1rOZ4dXHpMut3IZPeCWP5JixJBt72t/U9GRMsMfELHhyFK0w2s:a5qPCuUUeXRJwJB8tMMRM+FyFKws","tlshash":"91b1a121fa045e7f83e39bf13913bb03687c0a21d081b8a9f4bd486d14f2e692207d5b","size":5389,"data":"","first_seen":"2026-09-09T19:09:10.753549Z","last_seen":"2026-09-09T19:09:10.753549Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/vendor/slick/slick.min.js?ver=3.12.3","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-09-11T01:16:03.808091Z","times_seen":114114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/gla-gtag-events-js-extra","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fdda357018c4edcd6988e0a0686b767","sha1":"53c2eb9da6dc3d619f0a6e285266d2335d8a01f8","sha256":"6a1ac283def24abbc272c15fb1f85ec1a3506c5824970e6803a29b2e5e989f59","sha512":"498361e0e71b05524f318b0ce84e195b786f5db68ed4d0f462e68ee1a27bb23a7acfc5a8d3fff3f00f8cff08ac7e14abb00a5c494ab1c3d2807e402b919ef1de","ssdeep":"48:AkjwUKAGciA2VcMA2hJMiKPNzXYMFVU+04JN4NeMA2bAn2V2oLv+BoH5LdPsW:3JKcqcjP1pVUSJmNeUTSoZxPsW","tlshash":"6691d68ff75958ecb5712a7fd053f069b6f95b2be2fc5e9930c6681552b025f20420c8","size":4526,"data":"","first_seen":"2026-09-09T19:09:10.754524Z","last_seen":"2026-09-09T19:09:10.754524Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-11T02:25:03.1484Z","times_seen":963562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/astra-theme-js-js-extra","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2654ece31e7931c66697d41b2c670d3","sha1":"bca2f838d2e8e0443ff61bb3927ee5443731a390","sha256":"a3f83d1dca9b86da51fbdb192e0cb1255d51fbde54eb3aa0c9c81cad8f09e32b","sha512":"7f4bf393051f84f8d5f7c961f8db3e795b74f2d39887d946ae19d8bd84c1727fe305d142dd612a39cc844e9365c293776914365fa9875d5595fd7944911a36d8","ssdeep":"","tlshash":"8651a710c2d21d0176d78c7250118f64b0fd9190d1d4f08d9a7c454862e6a1a1668109","size":2953,"data":"","first_seen":"2026-09-09T19:09:10.755688Z","last_seen":"2026-09-09T19:09:10.755688Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.13","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","size":25965,"data":"","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-09-10T23:49:29.365214Z","times_seen":21367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6843fa9b6dfd1cae807f2c375830d09","sha1":"cc378797cb063f3981907698a6cc01e539eca654","sha256":"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070","sha512":"c9eb3dd5c84945d185f5ccccd954ef9546488e4979f9b3af5de54e107b2d0f8959e6c54509eee41f5ab67eb28488476e9a7751cd1a3fe671b618316cf944f3f0","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VP:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VP","tlshash":"119173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","size":4350,"data":"","first_seen":"2025-11-27T20:47:57.43318Z","last_seen":"2026-09-11T00:54:30.175971Z","times_seen":52662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wc-cart-fragments-js-extra","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a567c5deb62e5647bc1ca3ab815badcb","sha1":"6f5496264d8bf4413d3075f63388fea18b6b51ec","sha256":"1d0fe32a96723e5f557484e11ba5451b0b56ddffcbc48468689617252a887ac8","sha512":"85e2cf7b832ebde44520bf54428aa03fa504291711f1ce4e70f04846a34aec6e78c9d9cbbd7566c5b68158291fefdb11751b4cc586ef3ff8096b3c9184639e36","ssdeep":"","tlshash":"5251c247e6f85ddb6bcb7cb11425a5b721606553e2988c907149a8b402d0e42aa44e3f","size":3083,"data":"","first_seen":"2026-09-09T19:09:10.756507Z","last_seen":"2026-09-09T19:09:10.756507Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"283e371f0a6f62db8893d2112d9e6a43","sha1":"32f2c627d1230cf373a077764ec303c84d4b2fce","sha256":"cb5a4132a1f050ab79a0e967208757c368c69ddbf73e25da94eae7610e95efb2","sha512":"ec25c8acd4db35272662de602353d1e77316596e864555757d273bda6fa2b824551716052cf0feb504a9e0d522c980be1ded50881be135329ac2875d3d239341","ssdeep":"96:8vcHtHRA5NTDXnM2E0+1lfYsPHgRhR3S1:ZN0LE0+1lfYsvSC","tlshash":"85c1869ae77638dbb2f900f2697a0d47eb614435d6c8d438c9bea3141cb5893c274a46","size":5758,"data":"","first_seen":"2026-09-09T19:09:10.757434Z","last_seen":"2026-09-09T19:09:10.757434Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5705b9052821b74c1909a723583893e","sha1":"b908b327c44c8813020f7df9260b00513df4584e","sha256":"17daa5f5929c3deab38ffaacd89b213810e35e7d3ee115fc890b6bfdc230a9ad","sha512":"426dec929e44ecb6979356abcf8a55ac423fcc06bc47b5e4eb824640542b8c3f07a6e5c2aace46a6cf650dc7672e22545c85c3885e2665f0af6c402d25e737b8","ssdeep":"48:0ncEupIicboNb9j5okOBRQJ8H6xJsnDpr6r75eGSqlw4Sd+uOujoKsPPF3cLR8pL:0cEQxc4xN6a8EJWrO75ekw4klctsd85","tlshash":"bd91782774216d7322fb75ba2c9ee98414331639a8414501b509cf6c3b7e8ca7637f2e","size":4270,"data":"","first_seen":"2026-05-26T08:48:57.166241Z","last_seen":"2026-09-10T23:25:52.612028Z","times_seen":14737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aacf22a07f3473154075e56a27fcefdc","sha1":"ac7e2ec30585bea63105e09bf249f20e459a9442","sha256":"3880eea31c8c66dd237eaf8167f0cfa85d229a111e5d50c75a07a1a748bdcda9","sha512":"ee19159190bc43676cde0d7960c2fdce93c4c85c3772c066f6a785d6bac3323e5fce2ce17da9352b5d23bfadd6d016d88f6d5a772f102885e31693b80136aac2","ssdeep":"","tlshash":"4f2103f370a398ed48cf148a34522d16f1570d6ca885a01ef5aa08db2472e853362634","size":1392,"data":"","first_seen":"2025-10-05T16:15:06.697128Z","last_seen":"2026-09-09T19:09:10.715213Z","times_seen":8519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","size":15073,"data":"","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-09-11T00:43:26.344147Z","times_seen":75703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/astra-mobile-cart-js-extra","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef02d2d9dc3d6572af5d5a8a9408f3e8","sha1":"6797ae8def87ca2c2dd7672501f1d955964e8022","sha256":"27c8e6228ab82d9fe318d038d93ee52c80c6ad734706d65ba993da92fe46d003","sha512":"3c7d6d1052e89dacb37f52e68a32c384ba74399e55e1827a63f75c58bcb8397d4a11a186406ab7898d1314c40ed5a4bf8f3efd8169fdc066a10e10b63e8d830a","ssdeep":"","tlshash":"de512b45ca80593343d1ec30402500a4c1948c04d185b4044679800042b614802bc90e","size":2863,"data":"","first_seen":"2026-09-09T19:09:10.758375Z","last_seen":"2026-09-09T19:09:10.758375Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/themes/astra/assets/js/minified/mobile-cart.min.js?ver=4.11.13","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ad5443ab3fb010865349deaadfa3b14","sha1":"00a831fe4a6e9cbd87bbce1e1a432eeb3e997416","sha256":"2c50e55549dbd198e696daea93abb4481caf10863fcd08ea8936adb60de77824","sha512":"c9269cbaf058ffab797e77a88444fae82b759658caf07e68ff18918f233ebdc23e3b912204168234ff0f02b6d0c5d132316ff36aa0c3ae5d1ddb849ea18ffcb4","ssdeep":"96:yYGxuoNfwp0XCp8PkQUzyYxyk3z6g4c6/R6h26qkX6xDRGvRfTS3c2oMu6wQDTKK:yHx/do2vUzyYxyA6xz6as6DE7S3ju6iK","tlshash":"90b142646230b87104fb5657b6b7ebc43d3268cf640a0051282d9c9d2bbdfc141a1eef","size":5503,"data":"","first_seen":"2025-10-07T19:53:34.680429Z","last_seen":"2026-09-09T19:09:10.68377Z","times_seen":1939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/happy-elementor-addons-js-extra","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"daac0fc356887e38e3c304e73e7a2396","sha1":"0c226935d61ec89eeb5c9634cf079ab466e59ecc","sha256":"f78068523c50052e932ce8984ded37ca0c20603d488e2544f5f9309a20e5f8d5","sha512":"d3f5398ed12b93b8d2a02c736a99f5f0c8a79ae8294560f4c91f173901912f618ab545791e42073b9808bd2d0a7f2d1cc4a04a3370c3732037d63294ee1ae0eb","ssdeep":"","tlshash":"c3519563e54d0b8237f41ff5300cf75740d865b1d4c1d54c457de20d0970987535442b","size":3022,"data":"","first_seen":"2026-09-09T19:09:10.759231Z","last_seen":"2026-09-09T19:09:10.759231Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/happy-addons-pro-js-extra","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f800b493ce9e2703053fa7185f1fcc06","sha1":"9def0130b11ba8f93f62d878e37bc048a5fed65a","sha256":"52fbca547f24eb3d44e73768a0576c9a2476ececcb1d91ddabcb58929e8d46b5","sha512":"478a2863e87219368d69654d17cc7e173c220461e02547c0d82126c8537d82057a0afb894217815c3dbe1544ba0ec64e3134b415983b78175edec1498b7655d8","ssdeep":"","tlshash":"56518c67ca850f8289909df8606a63b300b82032e8808e8c0e5ef1440464a86c90040e","size":2920,"data":"","first_seen":"2026-09-09T19:09:10.760141Z","last_seen":"2026-09-09T19:09:10.760141Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons-pro/assets/js/happy-addons-pro.js?ver=2.13.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a68477edbdc8825aab14470d41d84815","sha1":"68cf964ce493c78b72c53975eb5eb7eb47ed8d4e","sha256":"bf17d6ccdc796dde590c4d8e809b02956503250b5eb2ee34f2af231b43c304b8","sha512":"ab63c4fb8b37e234763d056e144ba7c3f1635b33ded6a620b989f1569ebd6443e576d62cfea1d513da3abf49477d2f48d8c4c410fdc5ed524facf57350303d5a","ssdeep":"1536:/zBrNrLrVt+7aBArB0/N8UrDTN758TOrDUkMbKSdpvh4jngsJ9+RNbrRICQPaOlp:CpG8yA9fbdlO","tlshash":"b8e3531979b3147194af703f4b6f52097670404b5949ee283eac83a45fa886c27f9ff8","size":154393,"data":"","first_seen":"2024-08-15T08:13:46Z","last_seen":"2026-09-10T08:14:41.078643Z","times_seen":178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/google-listings-and-ads/js/build/gtag-events.js?ver=6972d3af2e3be67de9f1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f625e5a5fbb35a99d5fa3bc897962d4","sha1":"8f30fb69e61775eac87685708c778d0b21d00323","sha256":"45d95974b99fa349ba04d9f3d62d14de95387d2521dd68c912a737b712695587","sha512":"56bca096a651d208764cc6dccc2df48049bcb2350a735b7fcf2851f58c18fc95bfb462813a3db455466bc8ea0b9162b2a32452527ba405d9296e3d464b061946","ssdeep":"","tlshash":"2e4192dce03ca87662b70363a48e17c9fcf5a096f14248844c6569c11e28c82426e7be","size":2061,"data":"","first_seen":"2025-09-17T15:22:28.647089Z","last_seen":"2026-09-10T23:37:23.998536Z","times_seen":4207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeda92e7ce1f9426a757cdbdfa08a2d1","sha1":"877267da4c4b25a20117fc6c4614597133f95ea8","sha256":"0e8cd45c187bf1d46a732d698509971b6a2bd472294740f68d569d94f2ff97ba","sha512":"5f6c8d9a7c81b878988874091e3a76b82d0b6b4800a7e4873b743269c8c73a92cc4f3a3aa511d8e0f70ee5c31078ef0d5b24fdde0afd2e005cca3f716c799ab5","ssdeep":"","tlshash":"1bf097ba30d238ff240f04820a9b102de6a81cf542292041bffd44383a75ea4b22539e","size":489,"data":"","first_seen":"2025-10-05T16:15:06.559109Z","last_seen":"2026-09-09T19:09:10.680774Z","times_seen":6869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/vendor/dom-purify/purify.min.js?ver=3.1.6","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd4f07a2e5108be01d13a4f579ae5e55","sha1":"577622c109b6fc8a27f50d43aaf4820eae02d6d9","sha256":"c0845096a7c4a6741f362ac506c94c1c7d27dc603bcc1bf64a587f76f2dbe3a1","sha512":"8c1d1391305e402f594a406a0e17667d3bf5a9d7db5a9184ef6c89ff4d52aeaea1133648cf6c64cf57b9ee9f5a8bb21e1ccc041bb1e9cc6e8d769b428627f93e","ssdeep":"384:JmG3NaPDRFJoKGv8glM9EI2tJ7BoLoNCkQ0ecGvbEoO/FpurcTWcDXjoA+sfRdu4:lY1grv8cM9EttJ7SLoNCkQ0ecGvbNO/P","tlshash":"1fa23a5a7d2079b65fda01d920bb490d61bc101f300c84a0e7deedb454bbe9a6067f2f","size":21496,"data":"","first_seen":"2024-08-03T14:39:56Z","last_seen":"2026-09-11T00:26:52.968677Z","times_seen":2537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://cottoqpaxi.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.199Z","timestamp":1788980899199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.10.8.1 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 05:59:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3237ce-6b8\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1720,"size_decoded":1358,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1690)","md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-09-11T01:26:14.281767Z","times_seen":157552,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cottoqpaxi.com/wp-content/uploads/2025/10/10-1.jpg","fqdn":"www.cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.242Z","timestamp":1788980899242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/10-1.jpg HTTP/1.1\r\nHost: www.cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Feb 2026 02:57:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe48c-e0531\"\r\nexpires: Fri, 09 Oct 2026 19:08:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":918833,"size_decoded":916353,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1344x1102, components 3","md5":"bcf35c302f26a635c04cd4bd7a4905c8","sha1":"c6646b76849729354c57c0d6355fef426e79a664","sha256":"d36d7b94934eb7cd7e43cc20b4aa27d285342bddced8f38d80a9283e9b5607dd","sha512":"e8e25773579031e2f3eb0b37f89da7aaec0dd016cafa7b3683f57bbe01aafcc64aeb7d032dde88f25f671dade901fd4f723ed9c85de53576dbb3cd98f8962b35","ssdeep":"24576:VeAh0DQ+ql8YRHlxFDdVj3SIDtOHxh2BtFkCUSU5nY:IAmDQ+i8+HlxFDpDtOHxh8GfH5nY","tlshash":"56152303b0c164c71eeceb3612f798cd8636b7a671b1066618a425c76e558a5fff3228","first_seen":"2026-09-09T19:09:10.67776Z","last_seen":"2026-09-09T19:09:10.67776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":230,"dns":0,"connect":161,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"www.cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.723Z","timestamp":1788980899723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cottoqpaxi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 03 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 550241\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-11T02:24:12.178112Z","times_seen":291685,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":26,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cottoqpaxi.com/wp-content/uploads/2025/10/08.jpg","fqdn":"www.cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:20.076Z","timestamp":1788980900076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/08.jpg HTTP/1.1\r\nHost: www.cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Feb 2026 02:57:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe483-16fd48\"\r\nexpires: Fri, 09 Oct 2026 19:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1506632,"size_decoded":1498452,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1381x2038, components 3","md5":"4640ab46fba5cbd0607293d54d1fbb6f","sha1":"8765e2f2ce3fda9a40e6901829ec3cb78a0d940d","sha256":"3e35a4206d117439386557c8dc1194641404dfc796b0060e7244e8d0da1bf27f","sha512":"e3bffca065fb04798f5538e8ca81a01bac916c718ac547b728db6666f931790befc05d201ef9d0b9f2a259f8007a0e62e32169d33f68028e60a213f49007c48b","ssdeep":"24576:aBERVz7eLYCp9qx7Nbym6V72e2Ic6I6nBoKZpBlIyy:xPQbqZUm6V7BRyKZxpy","tlshash":"97253366c1815e7d07e4e36480b956798bd0bfa174e7a77c5b1ae3e4b323de3800b941","first_seen":"2026-09-09T19:09:10.679571Z","last_seen":"2026-09-09T19:09:10.679571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"www.cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:20.307Z","timestamp":1788980900307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 489\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\netag: \"698fe474-1e9\"\r\nexpires: Thu, 10 Sep 2026 07:08:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":489,"size_decoded":1008,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (449)","md5":"eeda92e7ce1f9426a757cdbdfa08a2d1","sha1":"877267da4c4b25a20117fc6c4614597133f95ea8","sha256":"0e8cd45c187bf1d46a732d698509971b6a2bd472294740f68d569d94f2ff97ba","sha512":"5f6c8d9a7c81b878988874091e3a76b82d0b6b4800a7e4873b743269c8c73a92cc4f3a3aa511d8e0f70ee5c31078ef0d5b24fdde0afd2e005cca3f716c799ab5","ssdeep":"","tlshash":"1bf097ba30d238ff240f04820a9b102de6a81cf542292041bffd44383a75ea4b22539e","first_seen":"2025-10-05T16:15:06.559109Z","last_seen":"2026-09-09T19:09:10.680774Z","times_seen":6869,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.192Z","timestamp":1788980899192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Sep 2026 19:08:19 GMT\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":3477,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"9e6b9ba92c3c07c25c3a64a82c98afc3","sha1":"3ddff674c5f9cd149de491cf5df81c1074eaf397","sha256":"3d675aa2a0daa5e5b0080f14f3335f2d7a15275badcc418deba1e740a5ea55ab","sha512":"097289d7ac1a663cb14fa54e87356c82d88f82ae9574fa4cdd23333e1a98d3e9241d11fbb3d3cf34b52bfa7aac3d625d2bccefeb40fae26970f0e20d0b4751ab","ssdeep":"768:yDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULD:GZQDSVUvWtALyl83uRf","tlshash":"e2a30e91041b5440ab834ce223cebf35fe1f92507141d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T22:36:20.76028Z","last_seen":"2026-09-11T01:23:46.428507Z","times_seen":19486,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":36,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.270Z","timestamp":1788980899270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 03:24:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5065f8-13ba\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5050,"size_decoded":2355,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-09-11T01:42:01.070374Z","times_seen":28425,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.725Z","timestamp":1788980899725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cottoqpaxi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 03 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 550241\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-11T02:24:12.178112Z","times_seen":291685,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":20,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/?wc-ajax=get_refreshed_fragments","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.942Z","timestamp":1788980899942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /?wc-ajax=get_refreshed_fragments HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:21 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3189,"size_decoded":1789,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5cdfab51707c15e14b2bc03b9066c4be","sha1":"83a83b731d5b71f75b280f611be1d2526d3fe67e","sha256":"4e8fb74e0d9696ae96191584d64d9520abfde28711bb5e7a857d25edc29cef13","sha512":"660a69bd4231c2f9fdcbee0e2a001298a98319b6bbe5ddc90eccfd60242f14cc3dc6f73b4ee18237d2ec693e36ac42bd3ee5ecfd79645e458f843d361bbb17b5","ssdeep":"","tlshash":"4f6155462279d57199f2cfc43ad5b6cdba27a818fda7420807b62618074ff64e024e7c","first_seen":"2026-09-09T19:09:10.682489Z","last_seen":"2026-09-09T19:09:10.682489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1733,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.178Z","timestamp":1788980899178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.32.4 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe474-729\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1833,"size_decoded":878,"mime_type":"text/css","magic":"ASCII text, with very long lines (1793)","md5":"ea00d13d17562eacbdc5b26dc402cdfa","sha1":"148976a08c3fdd1dcf600ef41fc9266a6d032be7","sha256":"5aa5cfe16be14539ea2ef696d4395fe84497a4877aacfa4208cca53732d87681","sha512":"14486b58547b9f213a7b80f1ed83c520822613a8428dac3b137f2f73ef6474dbbab939cbaca11589802eaf4ca95c8236783a8416dd96f635ce65c11dac487152","ssdeep":"","tlshash":"7f310850bd07652cb87fa60f8413125c658494dee581ccc6dba1f60aa2fcde33336935","first_seen":"2025-10-05T18:41:07.784386Z","last_seen":"2026-09-09T19:09:10.683242Z","times_seen":2756,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/themes/astra/assets/js/minified/mobile-cart.min.js?ver=4.11.13","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.248Z","timestamp":1788980899248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/mobile-cart.min.js?ver=4.11.13 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-157f\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5503,"size_decoded":2163,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5503), with no line terminators","md5":"0ad5443ab3fb010865349deaadfa3b14","sha1":"00a831fe4a6e9cbd87bbce1e1a432eeb3e997416","sha256":"2c50e55549dbd198e696daea93abb4481caf10863fcd08ea8936adb60de77824","sha512":"c9269cbaf058ffab797e77a88444fae82b759658caf07e68ff18918f233ebdc23e3b912204168234ff0f02b6d0c5d132316ff36aa0c3ae5d1ddb849ea18ffcb4","ssdeep":"96:yYGxuoNfwp0XCp8PkQUzyYxyk3z6g4c6/R6h26qkX6xDRGvRfTS3c2oMu6wQDTKK:yHx/do2vUzyYxyA6xz6as6DE7S3ju6iK","tlshash":"90b142646230b87104fb5657b6b7ebc43d3268cf640a0051282d9c9d2bbdfc141a1eef","first_seen":"2025-10-07T19:53:34.680429Z","last_seen":"2026-09-09T19:09:10.68377Z","times_seen":1939,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.253Z","timestamp":1788980899253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=10.8.1 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 05:59:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3237ce-3bd3\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15315,"size_decoded":5343,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15315), with no line terminators","md5":"fc06080ebf979384eaf92a5f1cd7a50b","sha1":"1474b07026c758629a82df51a5e4fbb7abf531df","sha256":"c50a0b33030ba0ec063be642c297f48af94359e2222ff140817248d591faf837","sha512":"d6443028105566717f328c56d17a0694e13905aa008bd36ba744e76bc5181e854ab80563be1d3167d728bf5eba6c502d7e36aebf0ed74504c88e47125cc710aa","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFX:qNdi7anPH5FL736ePkP/","tlshash":"fc62e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","first_seen":"2024-06-19T04:58:57Z","last_seen":"2026-09-11T01:26:14.344132Z","times_seen":153991,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.257Z","timestamp":1788980899257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.4 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe474-164b\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5707,"size_decoded":3037,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5667)","md5":"ed844a75bd2d74e3b64454dbfd440ee2","sha1":"4752da699b014fd519214fdbc6a93a3d6001edee","sha256":"4e33012a7e35a968355090bea6b8f31ecbd88b9d1660e76b9908d556d9e640ef","sha512":"d7dc3acacf33b697d0841f92473f7e508e0cb2cb9458f836c4bd972edd35449ef2a50c850588e8c69b3748b56870d79a36f4574445cb5394b5631950a6dc152e","ssdeep":"96:B87AtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:LsNukQ6jq9OVM6MeHGlQTvog02","tlshash":"47c154941a54fd2b21e135d9e41b9734663ec0333c1afdc1fa21dce955e8ed183aa531","first_seen":"2025-10-05T16:15:06.677014Z","last_seen":"2026-09-09T19:09:10.685424Z","times_seen":11031,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/google-listings-and-ads/js/build/gtag-events.js?ver=6972d3af2e3be67de9f1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.271Z","timestamp":1788980899271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/google-listings-and-ads/js/build/gtag-events.js?ver=6972d3af2e3be67de9f1 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 18 Jun 2026 01:50:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a334ef5-80d\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2061,"size_decoded":1425,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2061), with no line terminators","md5":"6f625e5a5fbb35a99d5fa3bc897962d4","sha1":"8f30fb69e61775eac87685708c778d0b21d00323","sha256":"45d95974b99fa349ba04d9f3d62d14de95387d2521dd68c912a737b712695587","sha512":"56bca096a651d208764cc6dccc2df48049bcb2350a735b7fcf2851f58c18fc95bfb462813a3db455466bc8ea0b9162b2a32452527ba405d9296e3d464b061946","ssdeep":"","tlshash":"2e4192dce03ca87662b70363a48e17c9fcf5a096f14248844c6569c11e28c82426e7be","first_seen":"2025-09-17T15:22:28.647089Z","last_seen":"2026-09-10T23:37:23.998536Z","times_seen":4207,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout-grid.min.css?ver=4.11.13","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.163Z","timestamp":1788980899163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout-grid.min.css?ver=4.11.13 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-3fb9\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16313,"size_decoded":2517,"mime_type":"text/css","magic":"ASCII text, with very long lines (16313), with no line terminators","md5":"4321978db50e5bce02a0e65f44740ddd","sha1":"b83fbe98c317005296e90acda65ea8c70702f871","sha256":"a6c33567692ef51c1b155cf5dd8ade9021e887419acc78e2342535c007e7f2a8","sha512":"3b5f8406d044348ba911b19575eb2748e1987beefa8263f8e8a4b509bcb13704293d2b3ed12ddc1de787b400a2c103e21fdd1e919feccb9c3fab8ef0b0ca70eb","ssdeep":"192:rmXW6uCBOOPXEx6U5Fn9nnn5f15DQ959Qn5nQ5f55fY595n55fvk9knk5fMHE9Ee:HVUXsEzOm9Oq/tGChqIchGW0ZGA/M9a","tlshash":"9172f2ab84382d7477edb59d7c4030d63c26d13cbb482179ace51b0d86da6eb36a170e","first_seen":"2024-12-01T05:37:10.024086Z","last_seen":"2026-09-10T19:45:45.131651Z","times_seen":12438,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.180Z","timestamp":1788980899180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.32.4 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\ncontent-length: 600\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\netag: \"698fe474-258\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":600,"size_decoded":1105,"mime_type":"text/css","magic":"ASCII text, with very long lines (560)","md5":"bebf33eb86f69f08345550f2ee7d0b83","sha1":"0481d46617ad6adaf1f1efb40a56ec6961329195","sha256":"79e658a25383947f817a034282e7b6841b3452a9395d6371dbd391736d214a1d","sha512":"21aaafbbf60c76a5e0e86782fcd69ef4ab9e4e76f1cd7c78b55007b9300ff33e763985ab53aaa482df85355fae3fc20d89261978f21196694dee75dd942b7d20","ssdeep":"","tlshash":"b3f012237e4b94aa783f195b1087337c74944ec893a0a8d8e9fa91436df4ca27334622","first_seen":"2025-10-05T16:15:06.700878Z","last_seen":"2026-09-09T19:09:10.686932Z","times_seen":7972,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/vendor/magnific-popup/magnific-popup.css?ver=3.12.3","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.188Z","timestamp":1788980899188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/vendor/magnific-popup/magnific-popup.css?ver=3.12.3 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-1a7f\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6783,"size_decoded":2320,"mime_type":"text/css","magic":"ASCII text","md5":"b9b07a00233924991768723f8e978815","sha1":"281809d9f1badcd427335881096b42b8d3f0888a","sha256":"7314ec80cf487b6d9bcb6e9be2a62c40986c6e526319e855bddb42b380e5f10a","sha512":"c34fedddaf30d49828932435150d495d1fec68889b259370adbef6884ec01de2e0467e6914e7bd97b3a3ca6c2c4bc5f3a4df2fde793701eafcb4219fa08fbadf","ssdeep":"192:hRQ4fS5fROP8frl3n2s96/LEAvHFykgxe:AO0fx3p6Fh","tlshash":"83e12cd3afb51305e525d5a9a253ab6973120023e70fdc7bafe1244cef8d6c90263b85","first_seen":"2023-04-07T03:19:52Z","last_seen":"2026-09-10T08:14:41.103643Z","times_seen":584,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.262Z","timestamp":1788980899262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.4 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe474-7e6a\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32362,"size_decoded":11066,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32322)","md5":"473c356dc1375b89a89396fdabc64357","sha1":"dc6f1a64100bbd009708a9ec40244abebe85c4d8","sha256":"a60e22996b3d94aa0e93c90794942d627d01e95fb3b144ea833d60c80fa803cf","sha512":"3338f5d0a801b88532ad3b764e46b3359e408c9b4218cdb7112659f1ea73139977024bf118b4bff06af0ee938a8579f6c7f8a21ebf94eed548607b62397e4249","ssdeep":"768:Vj1cI21yHLRd1M4ZBOh0hbuNFXCz1k8MtJR8RjDKv//Dpl1XkLVgbpM+MpKEnzBv:3caRd1MMBOhSmF7tJR8RjD8/mLVliEnN","tlshash":"36e209523296d4a2069f48a3f4331119f3769dd9b80af095b2bcdce6a471f877362b34","first_seen":"2025-10-05T16:15:06.575149Z","last_seen":"2026-09-09T19:09:10.687916Z","times_seen":11138,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.11.13","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.159Z","timestamp":1788980899159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.11.13 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-b2a3\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45731,"size_decoded":9476,"mime_type":"text/css","magic":"ASCII text, with very long lines (43549)","md5":"063387c1aadb9ba1e6e2038c8ce990ad","sha1":"ed1577ef20820b34b58e9c4b194e6c2715b4683f","sha256":"2ed2af3da90ae0f65ec5b2512186251d247a10b7e18eea1f3425a551426a1ffe","sha512":"2bec73ec88ba0fa5ff85634f82f8a2a66a2c0b4c842d4e71074d4b5c51c4acb205bf46066ae1b7bbb231b3325fdfa483535b62178f8136ae6b31b3b3a2f21aaa","ssdeep":"768:mPcOrk1rhDYollnk+FHk3YCzxdvN3JR2/WLmiyCFS7OHQtBU5PT1enhm2a7ZAR2s:A2YY+tHQtBU5PTwDuaP","tlshash":"a323f96047d035391233873efad6b9082a694313d74f26e6f8ab8768c9c57d71a72e4c","first_seen":"2025-09-09T21:36:58.042082Z","last_seen":"2026-09-10T23:49:29.366597Z","times_seen":15242,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.167Z","timestamp":1788980899167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.32.4 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe474-d16e\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53614,"size_decoded":7876,"mime_type":"text/css","magic":"ASCII text, with very long lines (53574)","md5":"28b0f194b6f875f29629396eac1671d5","sha1":"0ac6040104a49fb72bcfdeabc83cb2521f13a68b","sha256":"4ad0e11654ca79a411fcd3ec4cd398fc778915d1bb9e07b5e3370d2248257af4","sha512":"5f88a02ca687680da8db3cc32b459baf713adbf9a356f76921a1ddb9aabdfce49d0b420b7d225626ffb9f472a908f2543c0e0224c068aab93a8f66ac72c63551","ssdeep":"384:QsrJS/vmyeUaEMoZ0qk0e/RmRC5Cz9TfikvmGkvmCFldlRaE2ksYrOk:kLRdL2t7RllNX7svk","tlshash":"4e33fb623d13b269226f442b82d7364c526495c1ee4376d9fa04c5239afece63b36c1b","first_seen":"2025-10-05T16:15:06.672451Z","last_seen":"2026-09-09T19:09:10.688989Z","times_seen":7627,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.261Z","timestamp":1788980899261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe498-53d8\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21464,"size_decoded":7650,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-09-11T01:23:46.4419Z","times_seen":349578,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/uploads/2025/10/1200x1200png-F24DelDia35LAllpapack_F_b1be3308-6563-4a31-b8e9-55b80405662a.png","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.768Z","timestamp":1788980899768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/1200x1200png-F24DelDia35LAllpapack_F_b1be3308-6563-4a31-b8e9-55b80405662a.png HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Feb 2026 02:57:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe48b-19fd71\"\r\nexpires: Fri, 09 Oct 2026 19:08:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1703281,"size_decoded":1700406,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"f6668ec1bd8840bf4f936b88b2b01fa3","sha1":"dc71544ce1354fcc9a2289e770f3444b1284ff1d","sha256":"a32cb3beaf1d31debefd3a3a496179bc236d3facdbcfb6b3533edddf3c33702a","sha512":"6c33521b99d78da218a3926ea80861ff8603bf0d2fbe5d1616b68fdfbc7e806a1926dbd8411a71ca596a0135a774dda8f1df4fce34a557e1ef482ea40b3cc9a5","ssdeep":"24576:DY3jIoLpc0R5W6AW/KOiXr8wPU4Vz58zZaJ8kUDiO27:DLspceWtWVyrHJ58zZaJqK7","tlshash":"282533459df6838c0e8fa8d67b5a6a61eec3b53275e10a7f5063865700a0f177c329e2","first_seen":"2026-09-09T19:09:10.690086Z","last_seen":"2026-09-09T19:09:10.690086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/uploads/2025/10/1200x1200png-F24DelDia28LAllpapack_F.png","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.772Z","timestamp":1788980899772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/1200x1200png-F24DelDia28LAllpapack_F.png HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Feb 2026 02:56:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe477-f9326\"\r\nexpires: Fri, 09 Oct 2026 19:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1020710,"size_decoded":1016716,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"72a351a3b68d3a9080c77441f2230258","sha1":"c2621daae7cce10be5baff689a489f4e2981ac17","sha256":"1e2ae86c84dbcf325b262a2a5857150e66454a6ceca3e135aef2a8e51a2528ca","sha512":"ded83375773ba72de1457ff78c1eaa1db253b2aa05119f96bf7f819634cf455dd79f37597b5ac3cec793928750cf88385b6e4ae855449a79a4480cd34287ae2d","ssdeep":"24576:ciMij4VcuGC7EWPx3pj/CYhBWP1/HZPu15Ikrc+o0G:XMiGopKx5j/C2WP5HVgIkrTdG","tlshash":"6b253354a9fd2869e78fa17c9421a77558e1228bf20702ea255bd0c158c7ef072e7f8c","first_seen":"2026-09-09T19:09:10.691106Z","last_seen":"2026-09-09T19:09:10.691106Z","times_seen":1,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cottoqpaxi.com/wp-content/uploads/2025/10/05-1.jpg","fqdn":"www.cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.777Z","timestamp":1788980899777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/05-1.jpg HTTP/1.1\r\nHost: www.cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Feb 2026 02:57:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe47f-eaee5\"\r\nexpires: Fri, 09 Oct 2026 19:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":962277,"size_decoded":955901,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1381x2038, components 3","md5":"2810964d99299b9661283ddca325f8e3","sha1":"0c3a6f4144d29abd32eacf27fd2b6af0d136590d","sha256":"a46526cba62e7c5c214834fdfeaaca7fa66dc938f0951616838a4ae2324d5e50","sha512":"941a103bca30616916cb37454df59b543a2b3dd478eff65825f14cdc81159896a039e34ae8433e8a012afe3a196022a2053b925681ac78fd9dadec9f07174576","ssdeep":"24576:jykQlxB8XabVlZgcSaCPw0fySL9pgKWyprSQN:JanZgcSVsCXeQN","tlshash":"da2522b7d86c607af65a4b195a070c25b432f38532f7e077a5b338217d98b15a73b2c2","first_seen":"2026-09-09T19:09:10.692016Z","last_seen":"2026-09-09T19:09:10.692016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"www.cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:20.055Z","timestamp":1788980900055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.32.4\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78196\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\netag: \"698fe474-13174\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78196,"size_decoded":78637,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-09-11T01:28:10.685349Z","times_seen":170161,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/vendor/slick/slick.css?ver=3.12.3","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.186Z","timestamp":1788980899186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/vendor/slick/slick.css?ver=3.12.3 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-628\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1576,"size_decoded":1059,"mime_type":"text/css","magic":"ASCII text","md5":"4f3341463aadbeae2be045a891a0f8e7","sha1":"74767eb0ac271ca352c75649eeace2781fa70ce5","sha256":"8ddfc95dd91d3e6dc1508d465bce1ae13644736f6ae4c610278a251fd8fba66e","sha512":"3c37a4e0bd688de35e6100ff64347c59b21a50fbf1216bbcc8e04110cd0654a2207187d3fe281a91efd27576ddc0041ebe2f027d8f5a2882f3dffe768d373f5c","ssdeep":"","tlshash":"9c316b9806f74a46942f81c92993c71579efb092093d8484b7c05305eb8ebd93cd6bb2","first_seen":"2023-04-07T03:19:51Z","last_seen":"2026-09-10T19:46:10.959514Z","times_seen":1192,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.201Z","timestamp":1788980899201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.32.4 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe474-3ae1\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15073,"size_decoded":4759,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14886)","md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-09-11T00:43:26.344147Z","times_seen":75703,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.246Z","timestamp":1788980899246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=10.8.1 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 05:59:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3237ce-10fe\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4350,"size_decoded":1970,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4350), with no line terminators","md5":"d6843fa9b6dfd1cae807f2c375830d09","sha1":"cc378797cb063f3981907698a6cc01e539eca654","sha256":"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070","sha512":"c9eb3dd5c84945d185f5ccccd954ef9546488e4979f9b3af5de54e107b2d0f8959e6c54509eee41f5ab67eb28488476e9a7751cd1a3fe671b618316cf944f3f0","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VP:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VP","tlshash":"119173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","first_seen":"2025-11-27T20:47:57.43318Z","last_seen":"2026-09-11T00:54:30.175971Z","times_seen":52662,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/disco/assets/build/plugin-public.js?ver=1.3.50","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.255Z","timestamp":1788980899255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/disco/assets/build/plugin-public.js?ver=1.3.50 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\nlast-modified: Thu, 18 Jun 2026 09:13:50 GMT\r\netag: \"6a33b6ce-0\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":515,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T02:24:36.094873Z","times_seen":18393922,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.716Z","timestamp":1788980899716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cottoqpaxi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 03 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 550241\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-11T02:24:12.178112Z","times_seen":291685,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":4,"connect":32,"send":0,"wait":18,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cottoqpaxi.com/wp-content/uploads/2025/10/11.jpg","fqdn":"www.cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:20.077Z","timestamp":1788980900077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/11.jpg HTTP/1.1\r\nHost: www.cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Feb 2026 02:56:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe477-ca877\"\r\nexpires: Fri, 09 Oct 2026 19:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":829559,"size_decoded":813795,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1381x2038, components 3","md5":"10220604b381fe3bbeae9902d2c6bb5e","sha1":"c3283a8c530b127f2155a14787fa8cf1f0446be4","sha256":"0726864fe1fbbff7b261f1f94292f5df63ac334b388e0b2425ba043df357d27a","sha512":"525309d1666d42a94a5ce16d58d579745ff9611370a84453b77abb8cd0f12d5caf9456def08faae1b27849d56302a04b98562f4f794020085c943282de8fcd94","ssdeep":"12288:wx3BjASuFfzuqWC7h396QvReQD2Rgw92TXpGA5krEmrbDqfuA2rfMYDLhBsW:OCFiC7wRgw9214rbDqWb7MgsW","tlshash":"58051228d3a3517263762c0d70224fb15373fabb3899041f647982c1ac75b6299b6ff6","first_seen":"2026-09-09T19:09:10.695634Z","last_seen":"2026-09-09T19:09:10.695634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"www.cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:20.433Z","timestamp":1788980900433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0.2 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 03:24:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5065f8-58e0\"\r\nexpires: Thu, 10 Sep 2026 07:08:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22752,"size_decoded":6011,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-11T01:28:10.635436Z","times_seen":53095,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T19:08:14.079Z","timestamp":1788980894079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://cottoqpaxi.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://cottoqpaxi.com/wp-json/wp/v2/pages/16784\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://cottoqpaxi.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WooCommerce:10.8.1","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Elementor:3.32.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Magnific Popup:3.12.3","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}],"data":{"size":519730,"size_decoded":52884,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64250)","md5":"dc0f96714398503a518f5c5b218ad637","sha1":"387ee868f6627c68d02a266e51b8e6a155e2db7a","sha256":"b75326a7fe8c7a3a8af2d5f434992c32e2a87619daf329cb738368f67fd00918","sha512":"edb2304fc13801b19b53411795e9f378f00aa2658130447e7269349bd473e4e7dea78b34ff544e58b6af7fefdcdebcb59c2eba51033fae36c740502842e8ce14","ssdeep":"3072:hSB/iu54UN64hjAhAVfAvK9GqVeaAe4plOmKNmM/6hbgBG7BH7AwqYTpl:EwUN64OKGiG1sH+","tlshash":"15b4e992e2f5213a22afd3e26054ff8ab4569443c5c856edf3fe325c8784f4136a264d","first_seen":"2026-09-09T19:09:10.697676Z","last_seen":"2026-09-09T19:09:10.697676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4831,"timings":{"blocked":0,"dns":253,"connect":162,"send":0,"wait":4019,"receive":0,"ssl":397},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.177Z","timestamp":1788980899177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.32.4 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\ncontent-length: 254\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\netag: \"698fe474-fe\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":254,"size_decoded":758,"mime_type":"text/css","magic":"ASCII text","md5":"ea91284b60b06465029ae3388af97b6e","sha1":"6f4f5957b6770ee4e67119c25e5245daff828ac3","sha256":"22e526f3adc681d8d33a6f77d9545742775bd8fa8f4d9e105d3f4139f701bc37","sha512":"f88d9358e59e53825d68b67de54349dc835cf971f0651ba0b0ddb1ee8cf6c107506da39126d9cc56f2178a7a152a83543dcf246e562619b2a7e04f100dea9707","ssdeep":"","tlshash":"33d05e40342743c2301f596926af2aae38d00ddce246cb90ece1666257bbcc83776120","first_seen":"2025-10-05T16:15:06.601574Z","last_seen":"2026-09-09T19:09:10.699026Z","times_seen":7426,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.254Z","timestamp":1788980899254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=10.8.1 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 05:59:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3237ce-987\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2439,"size_decoded":1675,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2439), with no line terminators","md5":"46a816ff38bdd095e2118365ad4c618b","sha1":"c58ae69eeea5bf2846b88a6c7cbaaa7728a2444d","sha256":"0eb862a5891526d089b727fdfa30222cca4b4d75b5835727bf57df17436256f6","sha512":"b6650185967270b09fed48ef9937d21ae45b37010aef6b6a6a4ce3efb295bd39d3734b1cce7535e126cb255b1a3b40c27dd97322f1b70ee0e1c67163e2539cf4","ssdeep":"","tlshash":"41418335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","first_seen":"2026-02-05T17:32:11.552459Z","last_seen":"2026-09-11T00:55:25.071125Z","times_seen":46551,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cottoqpaxi.com/wp-content/uploads/2025/10/04-1.jpg","fqdn":"www.cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.775Z","timestamp":1788980899775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/04-1.jpg HTTP/1.1\r\nHost: www.cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Feb 2026 02:57:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe47f-cd962\"\r\nexpires: Fri, 09 Oct 2026 19:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":842082,"size_decoded":834360,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1381x2038, components 3","md5":"cd89969ed4c85a89a4144626f2236997","sha1":"2139114c055a796538b60ade143d4688243736fa","sha256":"11e46eea440b183ab584bb8cfcced2f21eb4c8fd319d5f8e8bfbeb29c71d8910","sha512":"e564c5a9aa77a50555c44f8a73fd85071cfeb32ebe9a9f21d44e59a9bf99c5347800cdb1896896cbd083505eda7f59d480fc637e2f25b36e255ba49528d949e1","ssdeep":"12288:8eelaiANJinvr839iym//yMOYxDKDDiuH1NfTVywYPAqFRvdhw7GVcgI3wtoS0bi:8on0wirPNx2DeCNLVKPAo/VcjgB1","tlshash":"c505228aaa0ea471f95663442e8b4f41757bfb4036f7c1ab2a737660bc067a447337c1","first_seen":"2026-09-09T19:09:10.700207Z","last_seen":"2026-09-09T19:09:10.700207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"www.cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/vendor/slick/ajax-loader.gif","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:20.010Z","timestamp":1788980900010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/vendor/slick/ajax-loader.gif HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/vendor/slick/slick-theme.css?ver=3.12.3\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-1052\"\r\nexpires: Fri, 09 Oct 2026 19:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4178,"size_decoded":3839,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-09-11T01:34:32.827947Z","times_seen":46867,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.161Z","timestamp":1788980899161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-10.8.1 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 05:59:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3237cd-36b6\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14006,"size_decoded":3173,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (10312)","md5":"e2d671c403c7e2bd09b3b298c748d0db","sha1":"d9e1884d4627704102a1e6c19905ca2f00431c6a","sha256":"45173f1550e57be245f3ed3b0f6fde7962e27901d5a04adf9342e546500bed49","sha512":"cee28ff90c4e108f2afbbf51772f294ed1a5b5d179b3c7dec59ee0781f6cb2e3f70a79a8f88e3b6587507c0aea6b2f483dd0d1f1ca753b8ed6670b9ef15c9770","ssdeep":"96:JctcybwYP5GKHxNBQUEr2xT8l/0JYNFvyadAAPOO+yH1:eF7RGKRNQr2Ges","tlshash":"fd5266b1e7b52cf8493989649e70b6d2b5f93080cbd325d9d04ae580719f4aa0bd27cf","first_seen":"2025-09-22T15:19:04.124916Z","last_seen":"2026-09-11T00:55:25.033822Z","times_seen":92765,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.259Z","timestamp":1788980899259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.4 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe474-e8bb\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59579,"size_decoded":19382,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59538)","md5":"1b0e51ea66f635185c33794622ae99e5","sha1":"4cf69c28e752122dc5f53770043265a1ec06c4ec","sha256":"d21670e3126d50e07f581fb3ef34b2c33cf9891a0011a502a6879bdb3f843089","sha512":"13bbefc216990339886ae3e0ff29145d8260aefa865c2e7ea469f6bbc6a160200b08607b5fb8a0bd767fc10508dd087ddd77259b27fc56ad55629b56e7084508","ssdeep":"1536:ZGuxmDuqHrrUN3KQ5RSSYeAjA6c9CSTwk83FKm184cR8+esOAexXKh83YNQAzeLB:26SOEAu","tlshash":"8743e9863652f4b70beb44dad03f450af25708a4a40da4d4bfe9dce594b0d8a133bb79","first_seen":"2025-10-05T16:15:06.664289Z","last_seen":"2026-09-09T19:09:10.703111Z","times_seen":11034,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/vendor/slick/slick.min.js?ver=3.12.3","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.264Z","timestamp":1788980899264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/vendor/slick/slick.min.js?ver=3.12.3 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-a76f\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42863,"size_decoded":11090,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-09-11T01:16:03.808091Z","times_seen":114114,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cottoqpaxi.com/wp-content/uploads/2025/10/01-1-1536x487.jpg","fqdn":"www.cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.240Z","timestamp":1788980899240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/01-1-1536x487.jpg HTTP/1.1\r\nHost: www.cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Feb 2026 02:56:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe476-2a230\"\r\nexpires: Fri, 09 Oct 2026 19:08:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":172592,"size_decoded":173026,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1536x487, components 3","md5":"00825a1691a959d3b0557c66e26dfda7","sha1":"5ab9b62de6efab3f0138e96d6892ab758ff1db2a","sha256":"535b985805e4c8db6f985e078a390010d2c0bb8b4d413050ae4d9ff67edd0b51","sha512":"a4f42d814258999340b1e24fb38144d67ab162e7f523d5a04e57cd9e1b7f26e55d26ace04b0f21ad9d16ae74c1ed8c453fee2c592365ca2eec4673bf775a8fc0","ssdeep":"3072:aw4Kb1XN08Ua5fURuobojsUmdjGt9vzsUvMg8bNVD++tzV8YGTxVdJ/EDZ:aK9N08XcRuohUmdjy96gQJLuYGTpJ/EN","tlshash":"67f323c20361efc6ee10bb35738d5b46282b1149033d9fb8f46cc99e5e519d7d8a3a85","first_seen":"2026-09-09T19:09:10.704315Z","last_seen":"2026-09-09T19:09:10.704315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":230,"dns":0,"connect":165,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"www.cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/js/happy-addons.min.js?ver=3.12.3","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.267Z","timestamp":1788980899267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/js/happy-addons.min.js?ver=3.12.3 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-5b6c\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23404,"size_decoded":7211,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23404), with no line terminators","md5":"2676c6f993a69845c161ff62df319482","sha1":"f462f731a86ba1ad065bd5711b18a629d8cb4934","sha256":"815201c7ac9a8b1322083d778493585a21846f1a34ae3843c146f61bb7cc8910","sha512":"960274a07e489f725bdc952cdc6f50e8abbf8bc700fcb56ea074fccd8ee3ec397dce5861cf92dee6424463bb72c3b3283b3464fc0865d9b52494d878379f1713","ssdeep":"384:UDKhQFSdDzrf2BOeWL/pf++B9IjKo3qHAPAmZQmyR6etFw6vc1Cgqnzss4yV57NW:UDKhQFSRzrOBOeq/ptB9IOmqyAmZQBRC","tlshash":"06b2d645755874f510ef313fb0aba20823325c7a8a0e9556386288f84fbddd42b67f7a","first_seen":"2024-08-29T22:28:04Z","last_seen":"2026-09-10T08:14:41.093499Z","times_seen":275,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/uploads/2025/10/1200x1200png-F25UAllpa26LDaypackBlueSpruceAndAbyss_F.png","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.773Z","timestamp":1788980899773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/1200x1200png-F25UAllpa26LDaypackBlueSpruceAndAbyss_F.png HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Feb 2026 02:57:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe48f-e0082\"\r\nexpires: Fri, 09 Oct 2026 19:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":917634,"size_decoded":912635,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"8c8c57b00907a81ff9b920cbd3253dda","sha1":"df357f9156976a2bac700c3b61a8e0ae94c6311d","sha256":"abdb02fe9f810b7edb13b1785741f72ebdf2fc067e744f6f8a98d386e8423c3f","sha512":"e8b6c6b917502b0c1f924b2a46e725844ccedd6549cd69d67929b783508f0e93a34e66db80442c9418455a11f6831754333e5fe55aa5e3c328a3e0c03522b3fa","ssdeep":"24576:d2aQNT5hnHFFJlYjwDmEWVKvkMkoWlsU/0ZryZHAAi:7QN7Y8DCKsdV+U/4uWAi","tlshash":"4d1533ff2fa0c49cc437aa5295d034d78e73b9afc9f764f80982942de84296521c875b","first_seen":"2026-09-09T19:09:10.706011Z","last_seen":"2026-09-09T19:09:10.706011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cottoqpaxi.com/wp-content/uploads/2025/10/06.jpg","fqdn":"www.cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.779Z","timestamp":1788980899779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/06.jpg HTTP/1.1\r\nHost: www.cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Feb 2026 02:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe47d-cd375\"\r\nexpires: Fri, 09 Oct 2026 19:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840565,"size_decoded":833820,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1381x2038, components 3","md5":"546bf9905e57f2deec70e32f8f3f2946","sha1":"a54e2c7dc382d476540481ba3e59885099e8eb3d","sha256":"76f8b80cdca75a1a9c4c6a1a3a8300e5fdc24415dcb485731f43cfe35bbb5dd2","sha512":"98f95dece6b61bf2c0a9e82e73793a4d515f503c3f4b03edddbea57f73f75a68e1528b3a3b0114f160e772a2ee6e456848bc344cc14d395368369bd0661192df","ssdeep":"24576:+/JPfcUasO5T9poBNnOkOebYHLPkIB3p4T:MzaZDB5BjlBm","tlshash":"ee0522a7ca6d0076fa29a7512f0b4d487427a3a635f3e81bb0b378557c6a34507b3bd0","first_seen":"2026-09-09T19:09:10.707003Z","last_seen":"2026-09-09T19:09:10.707003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"www.cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cottoqpaxi.com/wp-content/uploads/2025/10/10.jpg","fqdn":"www.cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.780Z","timestamp":1788980899780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/10.jpg HTTP/1.1\r\nHost: www.cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Feb 2026 02:56:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe476-e58ff\"\r\nexpires: Fri, 09 Oct 2026 19:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":940287,"size_decoded":928129,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1381x2038, components 3","md5":"1575685345452ce57561610a45bee802","sha1":"f1d7e890da425830131834c37ea52242a84ec64d","sha256":"cd5acab96861462029bdf283861aad415ba0350ec02c82fb9dfe1cbb711939cf","sha512":"514b6f6ff725157fd82a04d0a1fee28cfaf25ebbffcda57df23ed7ec28a0e1cc0b23c226f1d9866549636a4a9398cfb3043ebe9f9f75c4923843a9aa53f1e181","ssdeep":"12288:3p9J7mRmkDPP5CY2uo0krZgc0DuCQrCJSmAhKeHcJzgYfrCxdJobgyZjXzSNq86F:J7/kDBZ+CDuCt88+uZfeLobjRDoyqY","tlshash":"e7152289c70796ba03308cdd75990fb613b7e6bb3169108f967506c26e7239902b6ff4","first_seen":"2026-09-09T19:09:10.707881Z","last_seen":"2026-09-09T19:09:10.707881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"www.cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.200Z","timestamp":1788980899200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=10.8.1 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 05:59:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3237ce-10ae\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4270,"size_decoded":2114,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4270), with no line terminators","md5":"a5705b9052821b74c1909a723583893e","sha1":"b908b327c44c8813020f7df9260b00513df4584e","sha256":"17daa5f5929c3deab38ffaacd89b213810e35e7d3ee115fc890b6bfdc230a9ad","sha512":"426dec929e44ecb6979356abcf8a55ac423fcc06bc47b5e4eb824640542b8c3f07a6e5c2aace46a6cf650dc7672e22545c85c3885e2665f0af6c402d25e737b8","ssdeep":"48:0ncEupIicboNb9j5okOBRQJ8H6xJsnDpr6r75eGSqlw4Sd+uOujoKsPPF3cLR8pL:0cEQxc4xN6a8EJWrO75ekw4klctsd85","tlshash":"bd91782774216d7322fb75ba2c9ee98414331639a8414501b509cf6c3b7e8ca7637f2e","first_seen":"2026-05-26T08:48:57.166241Z","last_seen":"2026-09-10T23:25:52.612028Z","times_seen":14737,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/vendor/dom-purify/purify.min.js?ver=3.1.6","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.202Z","timestamp":1788980899202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/vendor/dom-purify/purify.min.js?ver=3.1.6 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-53f8\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21496,"size_decoded":8892,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21268)","md5":"fd4f07a2e5108be01d13a4f579ae5e55","sha1":"577622c109b6fc8a27f50d43aaf4820eae02d6d9","sha256":"c0845096a7c4a6741f362ac506c94c1c7d27dc603bcc1bf64a587f76f2dbe3a1","sha512":"8c1d1391305e402f594a406a0e17667d3bf5a9d7db5a9184ef6c89ff4d52aeaea1133648cf6c64cf57b9ee9f5a8bb21e1ccc041bb1e9cc6e8d769b428627f93e","ssdeep":"384:JmG3NaPDRFJoKGv8glM9EI2tJ7BoLoNCkQ0ecGvbEoO/FpurcTWcDXjoA+sfRdu4:lY1grv8cM9EttJ7SLoNCkQ0ecGvbNO/P","tlshash":"1fa23a5a7d2079b65fda01d920bb490d61bc101f300c84a0e7deedb454bbe9a6067f2f","first_seen":"2024-08-03T14:39:56Z","last_seen":"2026-09-11T00:26:52.968677Z","times_seen":2537,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.13","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.244Z","timestamp":1788980899244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.13 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-656d\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25965,"size_decoded":6814,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25965), with no line terminators","md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-09-10T23:49:29.365214Z","times_seen":21367,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/vendor/magnific-popup/jquery.magnific-popup.min.js?ver=3.12.3","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.265Z","timestamp":1788980899265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/vendor/magnific-popup/jquery.magnific-popup.min.js?ver=3.12.3 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-5181\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20865,"size_decoded":8074,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20735)","md5":"9b3beffc919a3e5fb7d02583fe6f0d97","sha1":"c7f8f668a2526941ab41efc48c0e98842681ac17","sha256":"dd31c5bc6367493b17a8e0db4f210a9557c5faffeb0b5614d40757ae12e07859","sha512":"1b8b9e42ddb5e7a4e22044f6f1ba948f5c42a37d6e65aab01558283a90c8cb4651d5af7c4e135c92e7a77927defce2516dd99d537200d3c668c6b04ae9087094","ssdeep":"384:oK+Ypwhc1sBEVEtk94tBnKIO46FbUkOK/NF0Sv/lZzZyQtdhTZF5ZFZ:oEl73MoUkOKv0GMAdXF5N","tlshash":"79922ba4f161b27397e361b4188f382c367a9922cd078412b65498d4adf8fd89237f7d","first_seen":"2024-10-11T08:31:24.959538Z","last_seen":"2026-09-10T08:14:41.092816Z","times_seen":413,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/?wc-ajax=get_refreshed_fragments","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.988Z","timestamp":1788980899988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"POST /?wc-ajax=get_refreshed_fragments HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://cottoqpaxi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"time=1788980899972"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:21 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://cottoqpaxi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3189,"size_decoded":1882,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5cdfab51707c15e14b2bc03b9066c4be","sha1":"83a83b731d5b71f75b280f611be1d2526d3fe67e","sha256":"4e8fb74e0d9696ae96191584d64d9520abfde28711bb5e7a857d25edc29cef13","sha512":"660a69bd4231c2f9fdcbee0e2a001298a98319b6bbe5ddc90eccfd60242f14cc3dc6f73b4ee18237d2ec693e36ac42bd3ee5ecfd79645e458f843d361bbb17b5","ssdeep":"","tlshash":"4f6155462279d57199f2cfc43ad5b6cdba27a818fda7420807b62618074ff64e024e7c","first_seen":"2026-09-09T19:09:10.682489Z","last_seen":"2026-09-09T19:09:10.682489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2090,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2090,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.181Z","timestamp":1788980899181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.32.4 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe474-28e6\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10470,"size_decoded":1624,"mime_type":"text/css","magic":"ASCII text, with very long lines (10430)","md5":"1e2dadd4cde1563daf59f1ca945a78f8","sha1":"4f6ee360b09e76ae7fc530b397b91fafdacb6d3b","sha256":"2c87889a86e672cd654dd3e433091b01c3691385c5d6e0d24fb7eff0f5e31f9e","sha512":"8187c92d1c9b6a97414068620e39db6b113bb0b3cf6b3f547b7cc8439c10b97cc2b78545863875f00c4cabdd20a77b4bc0368958ef2dc1b6dbd547641d42b070","ssdeep":"192:lKTrGZCLG+tl+A0zb+W6s5h6R6AHReKuLj6hXvR0:ly10","tlshash":"9622d4817d53814e1aff641b141b254ca1c9d4dee9bbecd5e8a6630386fbdc83b31928","first_seen":"2025-10-05T16:15:06.544647Z","last_seen":"2026-09-09T19:09:10.711603Z","times_seen":4249,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/uploads/elementor/css/post-16784.css?ver=1788948871","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.182Z","timestamp":1788980899182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-16784.css?ver=1788948871 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 09 Sep 2026 10:14:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa13187-8cb8\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36024,"size_decoded":3185,"mime_type":"text/css","magic":"ASCII text, with very long lines (36024), with no line terminators","md5":"d2b817ffbd4ba55c6b88c5c27b97b280","sha1":"bd5b93890a1c14a44a54f9e502995b5a3d0fd856","sha256":"57b7abdb7978353fdfeee4ac4a409c166bc6c614c5b099e1d157d4e5df5cd8c3","sha512":"e88e8b5e5889f2c1d1a0440c4ece57e4c761d03c5085967669160a5a2b9318e77ff90a74b9568a09a27585c684eb25864bd9660682cf5a8535216c28dd8dabed","ssdeep":"768:SWSMwYKLmBjyPjw/iwGV/FHqxpxBJHJ5UqU4DBpavK0OK+:iGr","tlshash":"b2f246607d239518b27f151b6103b19c7464fcca90bda7c2e8626223fcbed52b7a4b1d","first_seen":"2026-09-09T19:09:10.712176Z","last_seen":"2026-09-09T19:09:10.712176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.184Z","timestamp":1788980899184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe474-7917\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30999,"size_decoded":7613,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"008e0bb5ebfa7bc298a042f95944df25","sha1":"93897ebc560b38a1d2bff43c22dd6a3b7ee90c0c","sha256":"c4047043368afb4baf1aed25d358a5c2a333842a3b436b58491ab36aeee65b9d","sha512":"3f43f1a813b8188e7f8d296999491f99aff9010060f3e26b20ec32502fa76926361eda0644cdd20995661119206376c74516ea2a63ec4087fe88443aa3304022","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8E:wwlr+Klk3Yi+fwYUf2l8yQ/e9v3","tlshash":"b2d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T04:30:10Z","last_seen":"2026-09-11T00:24:53.679348Z","times_seen":44422,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/uploads/happyaddons/css/ha-16784.css?ver=3.12.3.1788946626","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.190Z","timestamp":1788980899190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/happyaddons/css/ha-16784.css?ver=3.12.3.1788946626 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 09 Sep 2026 10:14:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa13187-20b9\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8377,"size_decoded":2191,"mime_type":"text/css","magic":"ASCII text, with very long lines (8377), with no line terminators","md5":"6dbcbc44e7ddc98c25a64a3649680aa9","sha1":"9763baf0607ac356727f51602037509eecd21f1d","sha256":"fb929d4be5c7d74b3a00d7034c55ce0701602e808d598a480efa13b93c34dd72","sha512":"482aa896dfb8979e5e31646719a53abcb907a603f18a27d20bbaf82b58c4dbc76ec4fa238f1ee956d3ae622a6cfddb50b8223c6787dc40b52d196cac2cb56cb4","ssdeep":"96:ob2Utw+G426G3RuS43KKR4wxAc1T69wvmRXUQ:K2Ow+D26GhuS4aA4YAc1T69wOkQ","tlshash":"54029992f1761f85e8bac220958071d7b81dfd91f1918668eab3b384978ea90174df0f","first_seen":"2025-10-03T21:36:39.676088Z","last_seen":"2026-09-10T08:14:41.091178Z","times_seen":14,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.989Z","timestamp":1788980899989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe474-214d\"\r\nexpires: Thu, 10 Sep 2026 07:08:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8525,"size_decoded":3219,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8485)","md5":"c716c7ca8e115f42b8cf9b56e47059a1","sha1":"108629ca2b57c2aefe267369a14ff33bf5f3f40b","sha256":"1041bfe58302b006d1db0b545fcf851ba8e8220975ebf4686d2cdaacd0656e87","sha512":"290cac96b6c22f3e59e41dc6cee3661f7da90b507344b8c19bcf2481e2de8f78fdca02a959e136c7135cfcf3ce5b41e6660692be3157782f87e7f3459122fbbd","ssdeep":"192:DwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoGg:kHzqxOPV5lxodXLfpvD/NtakRhPZT8ck","tlshash":"5d02310a34c1982db58b58ba3532432866a8014de1018f6db1bf78fb85a6d82377b7f1","first_seen":"2025-10-05T16:15:06.578247Z","last_seen":"2026-09-09T19:09:10.714706Z","times_seen":11786,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:20.311Z","timestamp":1788980900311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe474-570\"\r\nexpires: Thu, 10 Sep 2026 07:08:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1392,"size_decoded":1208,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1352)","md5":"aacf22a07f3473154075e56a27fcefdc","sha1":"ac7e2ec30585bea63105e09bf249f20e459a9442","sha256":"3880eea31c8c66dd237eaf8167f0cfa85d229a111e5d50c75a07a1a748bdcda9","sha512":"ee19159190bc43676cde0d7960c2fdce93c4c85c3772c066f6a785d6bac3323e5fce2ce17da9352b5d23bfadd6d016d88f6d5a772f102885e31693b80136aac2","ssdeep":"","tlshash":"4f2103f370a398ed48cf148a34522d16f1570d6ca885a01ef5aa08db2472e853362634","first_seen":"2025-10-05T16:15:06.697128Z","last_seen":"2026-09-09T19:09:10.715213Z","times_seen":8519,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.718Z","timestamp":1788980899718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cottoqpaxi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 03 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 550241\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-11T02:24:12.178112Z","times_seen":291685,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/uploads/elementor/css/post-6.css?ver=1786455203","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.172Z","timestamp":1788980899172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1786455203 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Aug 2026 13:33:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7b24a3-490\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1168,"size_decoded":883,"mime_type":"text/css","magic":"ASCII text, with very long lines (1168), with no line terminators","md5":"254faba9aea54d647dad107fdefeff0a","sha1":"cef43fdbf7fbdd3e9ed554d88b6c2142ce02532c","sha256":"cfde5d4bdccd8cd0c94a9dc4301796450eb321f70f7ae56481541f454f752553","sha512":"c0a9ca456615cdcb97944d55a3540a1f5fbe53100e17a6af897b5d1abb268eb5771bc663d78e44e9dbe5ab62828cfe9f3316c6ca340c876ec58794b5386e862c","ssdeep":"","tlshash":"482125457a23d432e17b093f91c3b02c112cd46fa25f8adff41d9649f9bea462228647","first_seen":"2025-07-05T18:44:51.015936Z","last_seen":"2026-09-10T08:14:41.059059Z","times_seen":1021,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.175Z","timestamp":1788980899175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.32.4 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe474-684e\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26702,"size_decoded":4775,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-09-11T00:43:26.416983Z","times_seen":91162,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.197Z","timestamp":1788980899197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.10.8.1 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 05:59:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3237ce-25a4\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9636,"size_decoded":4073,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9242)","md5":"ef56117d1bb5cc41aa6bd127a49c7640","sha1":"b9c2ed774177fc0fceba5cb58113024b23fe4fb7","sha256":"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620","sha512":"0ec9039dbb47470815ad8bf58fd206672717a146b3a99bcb12444687e8489698e06664e6c6cc38a5d2954fa919e5a6c3bc57e44f3be2655f92b801bac43ec763","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMP:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovp","tlshash":"9f12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","first_seen":"2023-08-09T05:33:46Z","last_seen":"2026-09-11T01:26:14.332611Z","times_seen":178671,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18224765890","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.203Z","timestamp":1788980899203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=AW-18224765890 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\nexpires: Wed, 09 Sep 2026 19:08:19 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 150883\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434237,"size_decoded":151487,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4977)","md5":"2fb85e49f51940ab91474265391a93e9","sha1":"fa7614c2acda6cedba0eda1a34ee6a9a15fb5964","sha256":"b836ca6e8e2bbe3a8a7a4a17e2f188eddad3f3b19d7b069eb7167ef8d1d71349","sha512":"3456af91667393b8281c8df25d7dfb5a60f9d84737b07ff1fa468b6b7241e0915c1da98cd64b17089cc38b9e6745a41889e2a931b0732095d524d3e447e8593d","ssdeep":"6144:g3ja9+AJpPkXj7y5/2gp9hepcYR/ZETH3Uztkgx9BFhOspyCZ:30AJpPkn8zD+PlDOsN","tlshash":"78942acdb3d670629392f674503f018bb27a79a2b84cc899f28ad8d42d3465a5173f7c","first_seen":"2026-09-09T19:09:10.717258Z","last_seen":"2026-09-09T19:09:10.717258Z","times_seen":1,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":15,"connect":15,"send":0,"wait":47,"receive":63,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/disco/assets/build/plugin-public.css?ver=1.3.50","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.166Z","timestamp":1788980899166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/disco/assets/build/plugin-public.css?ver=1.3.50 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\ncontent-length: 305\r\nlast-modified: Thu, 18 Jun 2026 09:13:50 GMT\r\netag: \"6a33b6ce-131\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305,"size_decoded":810,"mime_type":"text/css","magic":"ASCII text, with very long lines (304)","md5":"f24396ec3888d87686cda91d113f32e5","sha1":"c32e23e130d60c8654764604cce2460ce391ce51","sha256":"9105f7fa5869fd280a270fb99e1e35c3647c4ebcc0bba319520663e3c6844b6b","sha512":"6e15b98529e9b3b7b88d7c84652fca11715b94dce6195705dd006dcd1251a7c91af2286c2bbb03b9976cda6aa65bac7a56ba0146c03fb365ff5c3f9a67700067","ssdeep":"","tlshash":"f9e0bd2c37220df51681db044b313b2332f1b2cacac30e93f8d7ca88a2ce90148a06c3","first_seen":"2025-08-15T21:58:43.822313Z","last_seen":"2026-09-10T19:56:25.324235Z","times_seen":78,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/vendor/slick/slick-theme.css?ver=3.12.3","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.187Z","timestamp":1788980899187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/vendor/slick/slick-theme.css?ver=3.12.3 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-ba1\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2977,"size_decoded":1399,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"75434a4b9aa63144c36c1077dbf99696","sha1":"c8d973e251a9aedf2166122ce7c476dbbe4d3f3e","sha256":"3c972eb6df02988bd20b61edc47088dad2f20d6e62dc7322fde3002f376eaa13","sha512":"a3ec39bee6f045eadd78409557be8bdfe3c55aeb352915bf1b93130f72716a981a0fd64d734f355a1acbf22202561448be26794109f0c6981c3122dac4e161a1","ssdeep":"","tlshash":"d75114a866bad7421417d8903b5357207bcb7453262ecca8f7e4128cbdcd0d97bc678a","first_seen":"2023-04-20T05:37:35Z","last_seen":"2026-09-10T19:46:11.048239Z","times_seen":719,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.194Z","timestamp":1788980899194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Sep 2026 19:08:19 GMT\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":1602,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63c1df95a2b11b7542db5b48c56125f1","sha1":"b4116959b5ecbc00779addd320d98d8863692210","sha256":"7ead28f8032c788137532c3a88e9a7bda1411143e54ed4c066271c29f90340b7","sha512":"a5e42a035be607f6a98d7f73a26c37ad2e03a81dd0b54f2cc7bc5dc94a41b3b80af855ce9604e2b2283a7936df9008f068a8285c4cd8e4e960ab411c9c687d4f","ssdeep":"384:bvWLvKvXvUwvzv+vLWaZOUPSVsWJqtUghWVWInkUBALWWXYjUyvsHWm1iUz+54WD:bv0vKvXv3vzv+vLrZOuSVsMqtNhWV1nR","tlshash":"66a2bdd6486ba405ab870cc163dfbfa2ad9e5151a081c4becbfd2cb86cd6d32136075d","first_seen":"2025-09-17T18:46:03.2743Z","last_seen":"2026-09-11T01:23:46.444616Z","times_seen":23182,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/uploads/2025/10/cropped-unnamed-32x32.png","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:21.155Z","timestamp":1788980901155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-unnamed-32x32.png HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 564\r\nlast-modified: Sat, 14 Feb 2026 02:57:23 GMT\r\netag: \"698fe493-234\"\r\nexpires: Fri, 09 Oct 2026 19:08:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":564,"size_decoded":1072,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"055f4ef52c0834dd7f3039a8a31a3320","sha1":"e350c692382c844e7b4eaa73518405d4f5748d95","sha256":"728b8018003964bf28cf6841f3bbe52d6e0ab185cca90c601c091d33df400d8b","sha512":"82ad54fa8d3b0308df48182bd4fe2105a91882d6523cd5ae726aa8bde16a16b2e56c2185f46b2516f4947d5750f8dc740193a8e4ceaeb738a41159947a6162e3","ssdeep":"","tlshash":"58f0e159086ae29aa78d123f53bfa02928b75789f31717547c51a0b116ba840cac80be","first_seen":"2026-09-09T19:09:10.719576Z","last_seen":"2026-09-09T19:09:10.719576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-grid.min.css?ver=4.11.13","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.164Z","timestamp":1788980899164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-grid.min.css?ver=4.11.13 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-1cd9e\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118174,"size_decoded":17188,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"11c585495988c8aa56bef4a130cfbef5","sha1":"655f0f737d8940192046a391087e444e651e680c","sha256":"7fbce81f2ed246812a8160d81dfbe7b9f17c3bf832eceec69669a2923c927cd8","sha512":"0707954c8714f236b6893b9a936625ef1635f2d5dab310ecd708f607bb6947bcbac2c28edd84e522dcdce09a2eae2447faf3ecf68c20bce2100fa6556044f4b7","ssdeep":"3072:rs5SK8C3n0zmM7POtUAS69xMFZxC2QX6eynyPJAdXmnOtxOVr5o0vqR8mrYU/lDw:rjk","tlshash":"5ab34067a1b02cb837ede794ac41baca7e10d13df2450530de9a1f1d82ca9e73526b4d","first_seen":"2025-05-21T22:47:05.77627Z","last_seen":"2026-09-09T19:09:10.720478Z","times_seen":3696,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons/assets/fonts/style.min.css?ver=3.12.3","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.183Z","timestamp":1788980899183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/fonts/style.min.css?ver=3.12.3 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-6363\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25443,"size_decoded":5821,"mime_type":"text/css","magic":"ASCII text, with very long lines (25442)","md5":"2a122fab955f87f5d0f9662a8fc5fc24","sha1":"023894fc44c62548e62b53f265ba80da0c87a609","sha256":"a526f7e1a82516f99f2639fc48cd8033545c9d1ddae99c01942dede8116d4ee5","sha512":"98e3c8a4dfec75f3e6aa4109f5b3d0f33cde7e64a737ae0779e71d2874b061b78aa83595a7285c45129f857af12c819c76c0423a989fb2e5cad037bfc45b0b79","ssdeep":"384:EN31KlD41wyt+bggxDhPipjo0Il0Wy5UtIAgwnax5Sqv+s:ENl4DRNeAgwmoqvF","tlshash":"8ab2c6b8e46e8cd47375cd7bc345b29d62b9f5a192490e61f03ba50c2fc16a802c5e7e","first_seen":"2023-04-05T06:20:49Z","last_seen":"2026-09-11T00:24:53.69507Z","times_seen":1985,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.197Z","timestamp":1788980899197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe498-3509\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5407,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-11T02:25:03.1484Z","times_seen":963562,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/uploads/2025/10/cropped-unnamed-192x192.png","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:21.152Z","timestamp":1788980901152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-unnamed-192x192.png HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Feb 2026 02:57:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe491-1521\"\r\nexpires: Fri, 09 Oct 2026 19:08:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5409,"size_decoded":5908,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"f5b59a7b7cae3bc6ce84d8a954351d9c","sha1":"656f06a5e0da7a010a1a65393822bf1e364fe0d6","sha256":"795e108ccb03d9ac7a9c70504975f5a2a1c00d2a709b2b0f7bbe9f1619d40e19","sha512":"a4f82dcb95e1b3ffabeceec91900d3b9ce131f7c1f347833d61b53a7ae7b6c722ec4ecaef0da94ccf05ad45128fa8f0f815da1690b0cdc2b09c628bb1efd352d","ssdeep":"96:t6Sjqdk1kJ+WVRF7DU/8bDecLrV3NK8asozlmKzVj3z+uriKctauNT4ejDVS/+:tFwk18+WtdDdV3NnOhZzVj3NrJN+","tlshash":"b1b16d56b4c80165e94146326db39a1234317de35dabbf125342ce9b646c27ccddac1e","first_seen":"2026-09-09T19:09:10.72203Z","last_seen":"2026-09-09T19:09:10.72203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/uploads/2025/10/cropped-Logo_Cotopaxi-640w-105x35.webp","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.214Z","timestamp":1788980899214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-Logo_Cotopaxi-640w-105x35.webp HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2046\r\nlast-modified: Sat, 14 Feb 2026 02:56:58 GMT\r\netag: \"698fe47a-7fe\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2046,"size_decoded":2484,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"520e93907586764882320e6238d3f5c0","sha1":"87854c039acaee91b6d340249c0b5cf37d693bb3","sha256":"8fe1ec9965327082f70aef5dbfa8bcbb6fdee8ceb9b8fb84d6ae301842c39074","sha512":"0ddaf34dd7bb05afa7e3b0915ffbb0a9393568b175cc467cb84ced7338ac2084d108746283c3cf116b69b81579412a47e7c8dd2d4317f6bfaca6f3476f4d1962","ssdeep":"","tlshash":"1d411aa678912330f2ccd8a4da1fc944a6d74ab0b38165d84cfcedb1063c84eac8c484","first_seen":"2026-09-09T19:09:10.723006Z","last_seen":"2026-09-09T19:09:10.723006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/happy-elementor-addons-pro/assets/js/happy-addons-pro.js?ver=2.13.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.268Z","timestamp":1788980899268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons-pro/assets/js/happy-addons-pro.js?ver=2.13.1 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe474-25b19\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154393,"size_decoded":28676,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (318)","md5":"a68477edbdc8825aab14470d41d84815","sha1":"68cf964ce493c78b72c53975eb5eb7eb47ed8d4e","sha256":"bf17d6ccdc796dde590c4d8e809b02956503250b5eb2ee34f2af231b43c304b8","sha512":"ab63c4fb8b37e234763d056e144ba7c3f1635b33ded6a620b989f1569ebd6443e576d62cfea1d513da3abf49477d2f48d8c4c410fdc5ed524facf57350303d5a","ssdeep":"1536:/zBrNrLrVt+7aBArB0/N8UrDTN758TOrDUkMbKSdpvh4jngsJ9+RNbrRICQPaOlp:CpG8yA9fbdlO","tlshash":"b8e3531979b3147194af703f4b6f52097670404b5949ee283eac83a45fa886c27f9ff8","first_seen":"2024-08-15T08:13:46Z","last_seen":"2026-09-10T08:14:41.078643Z","times_seen":178,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.727Z","timestamp":1788980899727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.32.4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13276\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\netag: \"698fe474-33dc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13276,"size_decoded":13716,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261","md5":"f0f8230116992e521526097a28f54066","sha1":"0447c6b10bbf73f97b23dcfd6e6a48510822cb6e","sha256":"8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951","sha512":"8d16904f9bff3e0660c960bfc63cfbb649fa656f1e0b24112578da414cdd141bc2ef766612dff765b58497c260e013cbd333c3a75ab2bd2ee861be4c8a538f36","ssdeep":"192:VWXmua5PVVX/EWyrSEnAxzot9ACR1uTa+3u4FcOorKgtwiPDlfjfYbnNPGwmpn:buaGrTAxkt9xKTi4gHtwiRoo5","tlshash":"0452d154054d49cae0086c730246e2a26ff0b4998fb1e9e29c6616836eb2ff40fd7f06","first_seen":"2023-04-05T11:05:25Z","last_seen":"2026-09-10T23:12:55.153795Z","times_seen":55578,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cottoqpaxi.com/wp-content/uploads/2025/10/09.jpg","fqdn":"www.cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:20.079Z","timestamp":1788980900079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/09.jpg HTTP/1.1\r\nHost: www.cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Feb 2026 02:57:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe48b-ee1a2\"\r\nexpires: Fri, 09 Oct 2026 19:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":975266,"size_decoded":968973,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1381x2038, components 3","md5":"daee227b72f1cf59423d04bc61e4aa64","sha1":"ae81faf57e7fb06852a3a9385b645feaafaac2a0","sha256":"2bf7802f1178c6429e59c194ed8e567ccdca7fdc2d07617e0588d19212142ff7","sha512":"fd14b853067ddb0f4df15ce49a4e7b2cecb054b898c18dbaec49a4bef66c939b3666c76d0f87a13ec58f68aa5cee5e3e095eace85941281a391dd29f85099294","ssdeep":"24576:sOVNvoSY6+EvhlL5kU0dTOS8kWaHhlZd+64D58q9:7NvohjUKTHRDuV3","tlshash":"c2252247e90d5a30f42a1b586f074fa42a73f36079fbc25b283b72587d8aa012733756","first_seen":"2026-09-09T19:09:10.724846Z","last_seen":"2026-09-09T19:09:10.724846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"www.cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=10.8.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.269Z","timestamp":1788980899269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=10.8.1 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 05:59:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3237ce-b7b\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2939,"size_decoded":1573,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2939), with no line terminators","md5":"ae52867db002b2f95a21b85b3b518a04","sha1":"4b1615786f2e5240bec4229c7dc5c6f865c92ebe","sha256":"592acc60b8eea94fc366110175d8406604a609201d6debe5eb008a6debfbdc3b","sha512":"cb641d54680e78ff8f575ca1746319f42acba15c3422bb40f011421545ac0647cad018635834fc9ed553c7a61e0789d329c18a774d1dcd5fdb52d207e69768cd","ssdeep":"","tlshash":"7551321fb0208e9618b3187e613a719622329d69f2098670a015dca42eece4b1777dcf","first_seen":"2023-08-09T19:51:14Z","last_seen":"2026-09-11T01:25:58.295084Z","times_seen":64286,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-smallscreen-grid.min.css?ver=4.11.13","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.541Z","timestamp":1788980899541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-smallscreen-grid.min.css?ver=4.11.13 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe473-1775\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6005,"size_decoded":1402,"mime_type":"text/css","magic":"ASCII text, with very long lines (6005), with no line terminators","md5":"c2d207510c5633f57dcd4c31128227b9","sha1":"dbbf10a9297e3f4b6300a01bc88fe517a3024d22","sha256":"2cef1c0962160f3be4c3207528d2993a37be6b7916119defe7ba7ea255c81b2c","sha512":"b9a6608fddd2c504b7908f78027cadb126cd8252103d136e0ad9bb9d65cbc4f781b967e6194ad5e8e9ffb9b20bdb4bddba22c023083d73b72f5f2cfc6639ee07","ssdeep":"96:QjHXN5HjRHJNnHKDHVbXHasH14Bj8nHBH8bN3HDUqrmSIiClPzoSOIQWMuFuXu4L:QjHXN5HjRHJNnHKDHJXHasHyBj8nHBHk","tlshash":"e2c1f3a7a9017d75379fe5847c0735e9bc1ae038bb05093558990b0cc7da8da71a3f2e","first_seen":"2023-04-07T07:35:21Z","last_seen":"2026-09-10T19:45:45.178178Z","times_seen":14573,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/uploads/2025/10/1200x1200png-F25UAllpa60LGearHaulerBoxBlueSpruceAndAbyss_F.png","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.770Z","timestamp":1788980899770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/1200x1200png-F25UAllpa60LGearHaulerBoxBlueSpruceAndAbyss_F.png HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Feb 2026 02:57:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe496-d7f6c\"\r\nexpires: Fri, 09 Oct 2026 19:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":884588,"size_decoded":882224,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"89ed61f73212a0ce667e9bb8a6c690bf","sha1":"f687fb750fbe182610c32829ff287b9b68083460","sha256":"9d45163b506c85bb4a4237d5450b847848e65888e3ceaf9e4fe462073c8e2742","sha512":"931451ef34d211d4c03f675219ade20270fc103835cdffbb89e2a7610814b6da823c19cda218bb64ce8acd9960e00ca2aa35162c916e85d4c3bebcf01ae78521","ssdeep":"24576:rYtFEEdKBuz4UfYEhUZdXtzma6xTBtWkt:rYd0WYcUl56xTBYY","tlshash":"921533c4b58768b3e10555f79832e33225a4aa8f633b51522f9250c3583a9b3dc37dbb","first_seen":"2026-09-09T19:09:10.726722Z","last_seen":"2026-09-09T19:09:10.726722Z","times_seen":1,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cottoqpaxi.com/wp-content/uploads/2025/10/07.jpg","fqdn":"www.cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:20.074Z","timestamp":1788980900074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/07.jpg HTTP/1.1\r\nHost: www.cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-09%2019%3A08%3A19%7C%7C%7Cep%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcottoqpaxi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Feb 2026 02:57:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe483-82b24\"\r\nexpires: Fri, 09 Oct 2026 19:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":535332,"size_decoded":517536,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1381x2038, components 3","md5":"4942dbf53c41a9feb744519fa83375be","sha1":"3d3864043ebb0367cc20729cf906e6e485355cca","sha256":"4d96dd3c1f9565afe9ad28f2e91e2de1ea6c6e0f71a5d20c85d2f11ebdaafe19","sha512":"c94e4d6dc7d7543b93b058ec8666c85cfbdf53f4728218be096b5e0aa7a90ca45126debb1013767a947447dc3fac058e5772b91fa8fd4afb09ed137cc184efd0","ssdeep":"12288:YzT81zrf2M//tuVHrnF6lgnsCS+DVuz3Zg2k3/kK0X2Yg2E:YkzLX/1uV2gnseMZfodK2Yy","tlshash":"45b4f0559353cceec9566b3222e47c6a28a3a576739e1ff1d287ff5ac0497b0c443a20","first_seen":"2026-09-09T19:09:10.727736Z","last_seen":"2026-09-09T19:09:10.727736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"www.cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"www.cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.32.4","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.173Z","timestamp":1788980899173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.32.4 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 02:56:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe474-e7d0\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59344,"size_decoded":13410,"mime_type":"text/css","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-09-11T00:43:26.433637Z","times_seen":115770,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cottoqpaxi.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"cottoqpaxi.com","domain":"cottoqpaxi.com","tld":"com"},"ip":{"addr":"62.106.90.234","port":443,"asn":199242,"as":"Malakmadze Web LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cottoqpaxi.com/","date":"2026-09-09T19:08:19.195Z","timestamp":1788980899195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cottoqpaxi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 15:36:29 GMT","end":"Thu, 15 Oct 2026 15:36:28 GMT"},"fingerprint":{"sha1":"4A:5A:44:C1:F4:17:F4:FF:28:51:F1:2B:D4:13:B5:4F:88:79:F1:F9","sha256":"00:37:6A:D8:AE:FB:90:E6:B7:47:1E:77:E3:DB:CC:CA:F3:FB:89:24:04:93:C6:AA:E2:A9:07:38:7C:BF:1C:B9"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: cottoqpaxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cottoqpaxi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:08:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Feb 2026 02:57:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698fe498-15601\"\r\nexpires: Thu, 10 Sep 2026 07:08:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":31160,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-11T02:25:03.147603Z","times_seen":1053433,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"cottoqpaxi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"cottoqpaxi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}