{"report_id":"4c46debe-c5b3-4331-a6a9-03d5ff904e88","version":6,"status":"done","tags":[],"date":"2026-02-23T12:40:50Z","url":{"schema":"http","addr":"nexustocanada.com","fqdn":"nexustocanada.com","domain":"nexustocanada.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"aoimmigration.com/","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"title":"Home - AOImmigration Services - Alejandra Ortiz","dom":{"size":121248,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8832)","md5":"0b965b014bf7ff96625cde8655ec2f2b","sha1":"dd6f076d1a10d085d98679afd8d4878605b246e1","sha256":"e1f34490cc3eef6b9552f95bbb50b04fbb59a1fce43d0e44769a44096f19f156","sha512":"a57c75e797e2f658f64aaacf9c103dbb735c7d2c3208b32f6298308f1a4584c542a4de430f136a836719cb7848044f7856336c5e124a928652c1b29600511074","ssdeep":"3072:LBEMub3iudGLd3Hk8ic/8KCg1o9uOThEmiBjC0:OGLd3f","tlshash":"7bc3a3b2648d583b52a713cb6021b208a1efce39cb12e9e1f3ff925857d9dd13653126","dom_hash":"domhash350b76e4b6f7cfc87f97c5d842a9cf16","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nexustocanada.com","fqdn":"nexustocanada.com","domain":"nexustocanada.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-30T12:40:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"nexustocanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"s3.amazonaws.com","ip":{"addr":"52.217.66.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":1245,"first_seen":"2020-05-13T22:53:44Z","last_seen":"2026-02-23T04:45:54.42168Z","alert_count":0,"request_count":1,"received_data":143660,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"assets.calendly.com","ip":{"addr":"172.64.146.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-02-26","domain_rank":89318,"first_seen":"2018-10-07T04:01:58Z","last_seen":"2026-02-18T17:07:54.85452Z","alert_count":0,"request_count":2,"received_data":15979,"sent_data":885,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"aoimmigration.com","ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-16T16:04:52.774683Z","last_seen":"2026-02-05T19:26:35.975694Z","alert_count":204,"request_count":68,"received_data":5914603,"sent_data":35799,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Yoast SEO:26.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Calendly","description":"Calendly is an app for scheduling appointments, meetings, and events.","website":"https://calendly.com/","common_platform_enumeration":"","icon":"Calendly.svg","categories":["Appointment scheduling"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"MailChimp","description":"Mailchimp is a marketing automation platform and email marketing service.","website":"https://mailchimp.com","common_platform_enumeration":"cpe:2.3:a:thinkshout:mailchimp:*:*:*:*:*:*:*:*","icon":"mailchimp.svg","categories":["Marketing automation","Email"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Elementor:3.29.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Redux Framework:4.5.7","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":11,"received_data":446021,"sent_data":6100,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":1,"received_data":77804,"sent_data":654,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-22T22:20:46.526035Z","alert_count":0,"request_count":2,"received_data":778881,"sent_data":893,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nexustocanada.com","ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2017-12-08","domain_rank":0,"first_seen":"2026-01-31T09:25:45.928059Z","last_seen":"2026-01-31T09:25:45.928059Z","alert_count":5,"request_count":5,"received_data":229066,"sent_data":2658,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/appear.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbbd68c06c9cdb2481b7050f6e64375e","sha1":"1ee3d2e29b6279f1986cd878072780d596250878","sha256":"4aded4f99d9aa82ccf099bfc6ddb735e25a6de44a124791c1e258cd05daee11c","sha512":"4de42f78a6ab93d9dce738e73c7dd889e7ffeea3dc01f8e09055b6eab195d1a759fbc502ecadeeeead6ec9be7fdcdededd440e154ee7e9742d77ff1a2fd48fac","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyu:X3/skfRwbDOrdfFjg/2cmVflyu","tlshash":"48910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","size":4228,"data":"","first_seen":"2023-03-07T12:11:58Z","last_seen":"2026-06-08T02:31:56.63605Z","times_seen":4917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/nice-select.min.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-06-08T12:06:52.051619Z","times_seen":9187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/eael-general-js-extra","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d72d5482b2ec6d88a9b242c9e5b87b68","sha1":"ba4fe9ef7e4b5961e449375247a8b561cbeb7c67","sha256":"4e17c4bb27d59a41504ce667590a4a8e7c1e6d7f2d2d536e927c932cf52f4b05","sha512":"48bb7e62c4eaf9908b043a091316ee5e12f038861073efc9994db63b95cdccc7c71111904e0e7ad3f1befeb91c570b1020bf9d39760948520f1f1c88a8222648","ssdeep":"","tlshash":"a141c121f1d6aaf74893eff13592741370a84424e104bdfee479ccad2d7b8642606c29","size":2354,"data":"","first_seen":"2026-02-23T12:41:01.830139Z","last_seen":"2026-02-23T12:58:23.845048Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-08T19:40:00.480331Z","times_seen":299076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KML926F5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"181f49ab2552c2b2b4a8129005d40626","sha1":"b6ec2df5d5859827553ac6da6d691e603dde9570","sha256":"c82d59bbf03b827c3a540e382329713d73405144b3eaf433bcae0f59c0079104","sha512":"14e8e054a498a414a7cb9cea109a7527306b47d737806ad57b5e92c44d77a013461f885cc2045f7c0b965ce3ad1250a38c82cc1a84611d2d21ba9d573c717c62","ssdeep":"6144:OmO7CUy2p3J5NYyv8NyI7pNH08pddlm2rEmkGjp:CuUy2pdDv8H5DrEU","tlshash":"e96408cdb3d6706693a3a478403f118bb17b7992e84cc899f186d8d42d70a9a4277f7c","size":322694,"data":"","first_seen":"2026-02-23T12:41:01.714915Z","last_seen":"2026-02-23T12:58:23.760594Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/wow.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"105fb3799fcf14f1ea8fcff23f2686dc","sha1":"00a8a01378a8259b38cba29dc69ddf761450053f","sha256":"704ae255ab62df5481884eb0db69b552c686e7094b21581b1cbc86a9b6c3800b","sha512":"ebdee19d8c8ab3f2d751c753ccad4a0631c1a1520821682dbcc8d9555a42d48ef9d67e333c2b9854e3452f783e5b37ecac686e287fa0f9d2ce6ce42168e87ba7","ssdeep":"96:gGqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:N30suCYOVEE7ne4JqgpIwdh","tlshash":"e1d175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f3c","size":6299,"data":"","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-06-08T10:23:02.54831Z","times_seen":3578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5f0f0bca87093cc0fcafd9a298fd908","sha1":"c195b8e587c6709575b4910ee459eea71374c0aa","sha256":"7ba24a9f22a258593023905b4e7df56f6bdf5fd9dcb2da60a645f23c2e2a2973","sha512":"cbb16c49cb251e450b1ba068cd3df86a2e82e5c9dac416b73506e1984be1d66c1db52ad7e373e441a35b3f6f62744a535f056fd6195e9f0cf177a5158822e4a4","ssdeep":"","tlshash":"52e028cf74511c7675ed05f733b5a51470535508b4091d22cdfdc814345c9d788131dc","size":346,"data":"","first_seen":"2026-02-23T12:41:01.831889Z","last_seen":"2026-03-28T09:27:24.93127Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54aa4505ef17b73fec438e25dff04e6e","sha1":"28a21c1248305058f59f43aa7c530b518cfa0afe","sha256":"9ebac707e78119049b4f9cf1fdcebb813ebca0dfe160a5f6002043b37c15de65","sha512":"ec9e172995154615c16e1b562ee4832d7976bd2bc37a348f010b074d1e57a8daa42f4c1bed592155d754971e5b27a1844ea0b02b20bdde90473f4a92bfb6f7f3","ssdeep":"","tlshash":"faf0edb044903928013d2629f70d523ca81a073f0732fda3e4ec18381bb808daa18fdc","size":466,"data":"","first_seen":"2026-02-23T12:41:01.833655Z","last_seen":"2026-03-28T09:27:24.938405Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-P3FBKEX06K\u0026cx=c\u0026gtm=4e62j0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aba5e197bcad761f36d73fedd978efd7","sha1":"05d2082351a76b0fcdd0e87b63b498a8ecf3a79b","sha256":"bc87234320ec0eb51b1c08447652965c6af114311ecee1a502ec8671aaede4e1","sha512":"a1460839b6cbaefa3b83b6aa7e17e3b168404d59b53bf35987e7f1daa93c73a6eb45318654b24e493dcc07f684d4e2f0db54c9c815b8a66176ea489884f5b5db","ssdeep":"6144:8LmO7CW6y273J5NYygLIR8Nyk7pNH08pddlmOrELkS5fenMcm0v:WuW6y27dDEIR855VrEff3E","tlshash":"fca41ace73d670269396f078503f018ba57b29a2b45dc89af189cce42d74a5a4237f7c","size":454953,"data":"","first_seen":"2026-02-23T12:41:01.826569Z","last_seen":"2026-02-23T12:58:23.805403Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/visarzo-core//assets/elementor/js/elementor-custom.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"707f8d428d1d2bf1b195f73971c66045","sha1":"730b5be54e676b6861f888c21dd4edef21cd2cc6","sha256":"4a1fb535cff7d33e2cc0904f4962eccaf8d89ef5a591f605a33266ceee7ee73c","sha512":"37bafb0cd0d102459fda7295e47cbb26e1adcb996450c90c78a4a5f1ff8d6b655e34e75d4cb60f10e3301346c241e96053c6bbb0354f1ad1291ab6a09ba843a5","ssdeep":"","tlshash":"60319b1a7459401898bb33d58ea6dc14ebe5120fd001d9c3babc22806f794097aebf8c","size":1493,"data":"","first_seen":"2023-03-26T05:07:57Z","last_seen":"2026-03-28T09:27:24.831Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.29.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce1be08b39ee243be3bfe131eaaeae3a","sha1":"1c69d2eae6441fec688c29dac5e1e1d3e2f8dcee","sha256":"daa996af776b05797cc92ccdea324c70b93d224159717e2b7586530246e7866f","sha512":"af0fc093f27cecd6bcaf0831b60fbda48c5f4150cc9e829db1a28194ed22f3160f31ab43a3c4f68c1c17702a646aa285651ceb5a16585eb70e2dae5f1d49102b","ssdeep":"96:BdrAtsNvDdfzjqj3Ntxl8O7AEQQ1vg+lsmejl3i7wVjLUVsc+2KBbZ7Qah88/2:fwsNpzjq3TNQWg+smeMs5QTY1V/2","tlshash":"bac163d41a94fc2b32e135d8e11b9734662ec0337c16f9c1fa21dce955e8ed183aa572","size":5700,"data":"","first_seen":"2025-05-28T23:40:12.529369Z","last_seen":"2026-06-08T16:25:00.9823Z","times_seen":2436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js","fqdn":"s3.amazonaws.com","domain":"s3.amazonaws.com","tld":""},"ip":{"addr":"52.217.66.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6465dd4a8331265e6629cd069e03504c","sha1":"581e1ae78452c7433d842af8e83afcebe36f17a6","sha256":"b15aceb04dbf5604df5617cfe984f48479cb131c1df02825d1c24e9f35d01857","sha512":"f8d98f3fe0824b943e225d40a68646cd55bb7154af30c5fc7ed076e5b156249e36c12f4b8202d506da9775bc7bd3f822d78eb31510be1f167a74b72dd7cd3e54","ssdeep":"1536:fYcvR3VhH37Ha7EmakRhIHAZkCDy08otU6myJXXxMZyYk0AjrzCqlKDh9YhnaTd6:fY8MaW2b+UELKTqnAditoKp/sPfC","tlshash":"52e32bddb2c5b0225bab30b9506f540bb276186a680c8460f16cd8f5bfb4e49a177f7c","size":143249,"data":"","first_seen":"2023-03-07T01:24:09Z","last_seen":"2026-06-08T17:37:23.035741Z","times_seen":5947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/popper.min.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c2f13e8454526f9da35b62c62aabc14","sha1":"95eac1b7cabe279d8de79cf8947c83434edb1a4b","sha256":"7a3e9267e00aa8a74981c9f9aa32f58f5b489dbb1cf89f92c42b8973f718e061","sha512":"2842c23607f7993e2ae308f24112fc19581d9e2ad96eab6a2b6bf0a36f862213c2f6099338856005a1c899cf10eac220815032e29a1f64171438df4a2aad38e4","ssdeep":"384:f5LFrVVVnCQvIR/CFU4hHPV4kdxXvYqo2D75zCx+vI2am3MxGpGTgd/9jt9+Db9X:hNVVVnyiU41xXvlD7wx+v0xyGTgnZO9X","tlshash":"8092a2cc3294b06647e791a7a07f960eb2339875650e9410f299f2e97c30ef9913bc79","size":20455,"data":"","first_seen":"2023-03-07T12:23:17Z","last_seen":"2026-06-07T04:00:15.063422Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"20e9fd73afc5ed47a76a9d2dc70b7d39","sha1":"931c3dfd07ac19a57df63ff1bd0df9268e7f84a0","sha256":"cdb8a5b6ceba2c3ccc09b65e1c9d5d6da22b780b5da040288453df5324bb743e","sha512":"818067ea4d5e7ceaf24cb96adc4bf8186d102697cd225d78be5c35cd189561841577d4be737a5adcba4e125bd2e1bdf61b4dd1cb329626765e4edd47ebcd4367","ssdeep":"","tlshash":"e4116ad6e79d88eba59121154da671cab0bd90f71c0d9c27fd8467b064d930e01339ea","size":1081,"data":"","first_seen":"2026-02-23T12:41:01.835583Z","last_seen":"2026-03-28T09:27:24.975315Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.29.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"946923a796e0cdeb2a08bb40792911f2","sha1":"2865c05e4477ca74a492e576cc2920f5aef8299f","sha256":"30d538521936936fc3a409fd375d3e01ba5d841ac4db9adeaea6ddd81a849fa4","sha512":"e42bb3347d6e9b963f63e4b9e641f4c7fc59a95a0a0043edb30fb57182168e512c5d718f835b4e5ef77a40dc55c6df2454cc636f06ba761c0cf116e680ae042a","ssdeep":"768:NRdRMtJR8RjDKv//DQl5ZnfVgbpM+MpKEAzBc5GlTSeUsveOBNU5aG9g3fWLJhoh:NRdCtJR8RjD8/0fVliEAzBc5UTSeUsGa","tlshash":"4be209527296d4a2069f48a3f0331119f3765dd9b80af0d8b2acdce1a475f877361b35","size":32876,"data":"","first_seen":"2025-05-28T23:40:12.448154Z","last_seen":"2026-06-08T16:25:01.011338Z","times_seen":2438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/elementor-frontend-js-before","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"42f7357e2c442a192d8605dbd174f7eb","sha1":"24e04bdf49d7e1a427eadb06a899329ebcb54996","sha256":"1b905fbbd650277368654694f9768f406f2f5aabaa89a37e6dd66e13513b85c6","sha512":"9c621d1078b49d9256dc96dc41e2fcf2091c693fdfdd64e89921eb92cf4c20724aec0a66e2a5af9734f0d95fb283a1b384482c45d63e61aee6884f8cb0e0d32d","ssdeep":"","tlshash":"c0717020f5459abb83e38bf13927ba07687c0926d000b9a5f4ec486d05f69a83207e67","size":3815,"data":"","first_seen":"2026-02-23T12:41:01.83734Z","last_seen":"2026-02-23T12:58:23.838619Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/bootstrap.min.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cfcd9ef665ac4f7b0a0164943fafc41","sha1":"8bf0a31c56a8f04247d966cb121643e05f48f7d0","sha256":"03ace13cf97c2b8a48d4f158222cce6c201ba7c88615c489043ca8c2acc8fdc1","sha512":"ad2bb3b81066865bddc1da6a0f76bdfe1972e68bc762815053c4e877f3e9f3d484a11c0f02ec7d2ec0ae5d6a3bdf25bc4b8497b988eda1e77467608cbbd95134","ssdeep":"768:uoYGDyGi43HVzdR2BmDb7zTNilqtvY1xWiDLYjQVW1/MVOlKvnxFa+B09:uoFXOCx0wNGaYk9","tlshash":"4143c80a72547873059fa176817f420bb736798ae90a826cb91d98dd1e7cc893237f7c","size":59968,"data":"","first_seen":"2023-03-07T14:47:08Z","last_seen":"2026-06-08T13:53:38.076029Z","times_seen":381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-08T19:36:55.008263Z","times_seen":263435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-08T19:35:11.340355Z","times_seen":895864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/visarzo-core//assets/elementor/js/testimonial.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91081ebc5fcd0e522d70fb73c57cb613","sha1":"ff03928fee364eba8e6f89d1fb982278ca63cf8e","sha256":"8ec004f68578441e519e073010591d048690db94ad58bda3b0d85a7a3fba128c","sha512":"0edd1775c71a4e95b2c602646066ba799068731351c72ac40f4959966a7bf6b6268b253604ff80a4d5b6fb4abb0c0dd251baa3201f0d3632723a1c1a4c7f5f5d","ssdeep":"","tlshash":"a4219c1e34660055b4bb72969eeb6608d6d6161fd040a8933ffc71902f3541f32aef0c","size":1168,"data":"","first_seen":"2025-08-04T02:23:16.967207Z","last_seen":"2026-03-28T09:27:24.92478Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/visarzo-core//assets/elementor/js/training.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"adaa31b8d84f8a8974b13df12768dbdd","sha1":"00a5de57315e9c8d96e414fb713f76116f23ac80","sha256":"61f084713c97fe28c874c98a958e9ae93137dc26e5238042e814e8296c2087b9","sha512":"14626c033d9900b98b1d8af3acc87d99e1359501941f1b05608557b885d4b0b149d6821da8a2c4a529c3ec2e5d4c25ad6ed1b944f7c211f41bad458e04335459","ssdeep":"","tlshash":"5251292630aa6114607bbd675a97752cc6e6421f814138a3bffc12600fb6e1a32edf5c","size":2952,"data":"","first_seen":"2025-08-04T02:23:17.004026Z","last_seen":"2026-03-28T09:27:24.865156Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"92934c5576266895940f3a98de37ab1e","sha1":"0030b737cbb82b6cb74e0f87b0e8e5d9b5493002","sha256":"8d1583edc086fdb7b8e512d5fbaaa4921dd6702dff2d05fd53d8122c2d8f000b","sha512":"76f1230bb206a9a43e94143bbd3b9edc5e7718e30ceb2d0359653c15d53179e77911640df20c4a85138dd45a73437f95c76c256767f6c9c1c8c30c5f62486058","ssdeep":"96:MvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3Sz:pN0LE0+1lfYsvSW","tlshash":"fd91a696e77638cbb2f900f2697a0d47eb614435d6c8d438c9ada3181cb5893c274b46","size":4210,"data":"","first_seen":"2026-02-23T12:41:01.839761Z","last_seen":"2026-02-23T12:58:23.841131Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f003529420719afa45a0fcc5b793c742","sha1":"f1162f2506b1b9a850b55e47b204fc9be470e9e6","sha256":"0257038ca3f711852d4e511877b0bdd55afe7e97a9dec6af4f9818634f9930c6","sha512":"e753ab3daa2156cc60d70d1ae02c68353ff74f817dc0cdd2960778eea4d46a0e9842c21c5bc48f21c1524cdccaddc48b229c5cb3d7069063cb539b27cb5902f5","ssdeep":"","tlshash":"c0f059f6f1ccac5bcb653076283a195c331fa24454190e88ed780e0038d941c113690e","size":511,"data":"","first_seen":"2026-02-23T12:41:01.841651Z","last_seen":"2026-03-28T09:27:24.979342Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"95290bd0b141d4f24388b6d7eb5ed64b","sha1":"6c65d142b663cc6dfe1a6b0c517daeaac53c1946","sha256":"ef6fac0821158d2c868ba7bb7079ce9a282e85a5245285795ea809b3dd64256b","sha512":"79df28962d5e5c678719d6e5502a8bdebc50c1f3f52267709a17729d2558c7631f1ee7122a8e4ec78e467058138728cde406e36b1d04c03fa624e8e35f9ece45","ssdeep":"","tlshash":"2ae02b95c73d937903fe50dea8f077ce7438008f7d0249fab5580451647ac595d848f9","size":414,"data":"","first_seen":"2026-02-23T12:41:01.843311Z","last_seen":"2026-02-23T12:58:23.846007Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/jquery.fancybox.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e11711058a9459a94d5a19b26a78135","sha1":"76792d5913afe035b6ccbac585b0b5e70b33aa76","sha256":"7b99eee1db728472aaa8452017a0d755f488e8d647cc0f62baf45f8ff65b95ba","sha512":"6ecbe997bc6e82fa7976a98e291ec31e043de23f0f5d06834fcc809cde8d0c3ffa0e96c734dfc0b0fbc313e405eac603540913794bb3a9a86ac56db5d2ab868a","ssdeep":"1536:26iljQs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSp:2NoETcqwF3wO/VUbZZr7WP83RSD6E3t","tlshash":"f3e3968a67bd112589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","size":154104,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-06-08T13:53:38.090382Z","times_seen":3124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/scrollbar.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","size":40547,"data":"","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-06-08T13:53:38.113863Z","times_seen":3965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/owl.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54428880ec8df798ac3d666f5113c7ff","sha1":"9e43e74b8677f39e87f1b11be4d536c618b14bb3","sha256":"0402874ff311f284b18af9e4c453ee5bf0916a3b7335f0be52dcb54a1a31338b","sha512":"abceb872c8942d366a533c0c572e0e6e31d1b428ad2bc6fa1e746fd31811b6f8dfcd77814723adf44e1a8585436b511097576159b8eab40706b025e3158eda24","ssdeep":"1536:/PLoreUScogMjVNPP8aLMBJk8u9hKt1o619IYj1oJ0SQIOZ:/fHNPP/qJ9BoC9XplIOZ","tlshash":"e48383c5f36c261b422a31785e9e23ce713d412ad91118af7ca4e9dc28d546c836eff9","size":85303,"data":"","first_seen":"2023-03-07T01:10:42Z","last_seen":"2026-06-08T13:53:38.058096Z","times_seen":4300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/tweenmax.min.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ae6465dae50c862dc55a547caa86a66","sha1":"38cb690397f9eef5a9592efc9ce9e936e4e863cb","sha256":"a863a77e9ee263a0ec9c1e792bb33ed0f663582b7369f472261df7b6040990c4","sha512":"e8c08fb3d7db488b7a993a491f62dba3d2a4ef581c83063ce410aa2463f4e31f8ed3c5b79bf3a229f32231ce1540a627f830ad010c291ae996783d1c002791b1","ssdeep":"1536:jjm/F0VPBJ7jG/D+EH/GPJBpYSiZAr0GOlygZYzw6JcIfGxlLYiGsYVVOiE:jC/Wv51/vme0lybJXkYiGu","tlshash":"3db318c5312270128497269a557f0a47333bddbab4098d2cf589c5de3e1ce8921aff7a","size":115897,"data":"","first_seen":"2023-03-07T12:12:24Z","last_seen":"2026-06-08T14:51:02.916435Z","times_seen":2477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/script.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f2c1b8ed828aafb2e33cf7aa1cc80b6","sha1":"dbb2574d0011109e259d7f3770df83944c892e32","sha256":"320b21bcd1bced570e45b1e62eeabaa2025c48aae3da63f0609e2f98748405a3","sha512":"09f4f9a42b0b58216052191ef92ef7109adf4a2673b3d93f4c6ea089ab0a9215c45d920b2b9020f4aa662f45ed666d75d6d8022b2130fcd59b077abb93307126","ssdeep":"192:WLCpUNxFy0Cwcu5CvbwCdLSflCo62shPsC/jMKrKH6UZjYL1ogSUJJVNgStCnY1/:NrGfk2sFTrKTdgSUJdgSUg/vgi","tlshash":"7d42100ab4f520a2103771394bff5208776a440b8509ed21bd9f0ba86f8975d79fab4c","size":12701,"data":"","first_seen":"2026-02-23T12:41:01.77653Z","last_seen":"2026-03-28T09:27:24.904467Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-08T19:35:30.278031Z","times_seen":825703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/switcher.min.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa65fb15d3b19f50d706d5419f1d1e22","sha1":"98ad9345b42c6938f8eb9aa84678541e324472a1","sha256":"2d75935b4147dff5207a04e938b974b49219bc4d80d3e5ce5dee417537afcc8e","sha512":"898da905e592b4bdb5e8435f86c799180442f60e921336bdcfa0c39914dc6f105eeeb8c13366fc31cf0bb6dc4fd89c0d336750557083d833d8ed7cd945ae1fbb","ssdeep":"","tlshash":"5a51860b70c0f46e03963368121f207a756abf69a455d93cf829f4e1ab7454a0a73fb9","size":2765,"data":"","first_seen":"2023-03-07T12:57:51Z","last_seen":"2026-06-07T20:40:29.442565Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/visarzo-core//assets/elementor/js/imigration.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"25bd1a7b87d145784bc4899f29c1ab95","sha1":"ef61aa83612084ecca15e216218b6281ee7eb533","sha256":"47bbc809b4947da6b8e0c1ef4df40699ce9142212fa574b2439ae9309e9dfd62","sha512":"8d1aabb777c16142e2ad82aa43557733ca049b5245c287fa831b467be526aaf319f8d87982d01299d4acdc339baac095516e8ea789edf12d98f9007d06adab7c","ssdeep":"","tlshash":"1d21491a30a9414964b77b975eab6118d7e6021bc041b8937fbc22502f3541f72edf4c","size":1192,"data":"","first_seen":"2025-08-04T02:23:16.950949Z","last_seen":"2026-03-28T09:27:24.802724Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.29.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a38afa0832e8ad1c051be0e0abc9c947","sha1":"81e90ad3b972589bcceb3547f37e13d8dd9b9216","sha256":"7a10091e9a23720cd57eb7c02c8c0b8e826f6a73101370a432e9cbb63ca77e72","sha512":"6af026805339667fcc4cb62c2843f4f97157c66cdbc395c3ae246933c855ad6b35b0180a05d6a958e89342e6c90daa6034d0e45889084c617b82576946a1c602","ssdeep":"768:QeAjA6wk9C+QioJHYNQAzeLHeBHmjkSK7+z1hlN14cR8+AvNKRiA8m6XS3gzlAIT:QeAjA6f9C+QiSYNQAzeLHeBHmjkOzRNM","tlshash":"ef23c7853652f4f70beb40daa02f450af25619a8640df4d4bfe9dce19470e8e237ab74","size":48393,"data":"","first_seen":"2025-05-28T23:40:12.478208Z","last_seen":"2026-06-08T16:25:00.982812Z","times_seen":2434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"040e6140d0ae199eb06845c13c6f0fbd","sha1":"c00d25566202cdef353551ef616639c7d5d2c341","sha256":"210ffb0f1899e88bacd0977831dc88ca9ca076a4a0f8052509560ebd423a8c7c","sha512":"2d15d635205b66d1859d5f144044da65214af61ce551137e7fae55bd75ed732933eff23a1786692e1ac8862cff5fd7a7a1074abbf909edf0acb382346f7bc76a","ssdeep":"","tlshash":"25f09eb970d278ff240f04860a97102de5981cf5412520417eba44383a75fb4b36539e","size":489,"data":"","first_seen":"2025-05-29T08:16:06.29076Z","last_seen":"2026-06-08T16:25:00.989526Z","times_seen":1789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36b0137c4131cef52feef5ac0f266c20","sha1":"4f4d53eb3ba85597b5690e4b926d35c6e5173058","sha256":"52994ca03f2fb13fa067938c393826e483159e29dc1a2eda1f498f15b0152230","sha512":"160b57eccd5e66a40bc468596106c92f2e0484c35c9c6d50c6a5687ee3505a99db09d2b15609af051e418168539d7c112be94265c5ada19946e3c76ff6364b13","ssdeep":"","tlshash":"5a2103f370a3d8ee48cf148a35522d16f1570c59b885a01ef5aa08db3472e853362638","size":1394,"data":"","first_seen":"2025-05-28T23:40:12.52701Z","last_seen":"2026-06-08T16:25:00.973697Z","times_seen":2034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1c06d85ae7b8b032bef47e42e4c08f9","sha1":"71853c6197a6a7f222db0f1978c7cb232b87c5ee","sha256":"75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070","sha512":"016ba8c4cfde65af99cb5fa8b8a37e2eb73f481b3ae34991666df2e04feb6c038666ebd1ec2b6f623967756033c702dde5f423f7d47ab6ed1827ff53783731f7","ssdeep":"","tlshash":"c710000000000000000000000000000000300000000000000000003000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-06-08T19:09:05.595116Z","times_seen":45326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-06-08T15:09:03.469239Z","times_seen":217137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.1.20","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"620dbe4f531b1bbbbf5421ed8ada21db","sha1":"da90c231d9f68e3f7538eb515ee7d3c3c8d03150","sha256":"e7442478ebe71a402f96fae8bdb6cd7d9153c4eedede61c3b96f0966da2c1337","sha512":"c3ff6f9f0ff2cefdb59c61c6f8976723897db86027b48f47706168f77cdc977130c4d669dfc4523a44b8561c891a3aa075c8df15e898eec1eb5dac16622a10a6","ssdeep":"192:4v6DbN3SLFNjilRm5ReHKj2H8gH+gwnmMQwco/0MbYrdpb9pPkx:4v6DbNiVii2KnpcLpb9p8x","tlshash":"1732e988378776f056b36025947f761ab136ab74741c8850a21ad8e06db9d8fe073f3e","size":11619,"data":"","first_seen":"2025-06-02T14:11:02.01093Z","last_seen":"2026-06-07T23:41:45.61266Z","times_seen":2333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.30dc2f9c080845a413a6.bundle.min.js","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b532ba0a3212dbf2a6f7e1731dae06b","sha1":"e3bd74e5f4e8a24bbe907032bc13e4d3d80bfb39","sha256":"7862470de50d2527f7a40a07d85513d3e61d70ff4711a84695e8d2da578336b2","sha512":"6e73ce64bdadc4b477b19ad29094945225c83e430480f5183de5817965e7b911fcd1d164a5e64c583aff17406daf40c328b0383867a1f4dc7a35077fd11639b4","ssdeep":"192:fOwfFpzqxODoWV5KxZmdXLf+UvDZ5CMtakRhPZTxcMkCwB410QsFfpRHvcwxDnPo:pHzqxORV5KxodXLfpvD/NtakRhPZTxcg","tlshash":"3f02210a74c1942db58b58ba3532432c66a8014de1018f6eb1bf79fbc5a6d82377b7f1","size":8541,"data":"","first_seen":"2025-05-28T23:40:12.463369Z","last_seen":"2026-06-08T16:25:00.990511Z","times_seen":2522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.calendly.com/assets/external/widget.js","fqdn":"assets.calendly.com","domain":"calendly.com","tld":"com"},"ip":{"addr":"172.64.146.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef3bf711963c747494cae07900aacd7c","sha1":"6b2d3587f1f5267a3ba53b86f6ac8be41fafda10","sha256":"f80ce7415f7fb5c4bf1d8eed31652b1246241e4e3cef6cbf6c853b9a7e16dde0","sha512":"60eb78a3947c0aae48970e1756b514335f574773aea1cd68fd0c8dcd9ffd3c9527c95110f0c7ee4d089afa3644753fe4f1b4ec78d2e871616e621c9421569f18","ssdeep":"192:CII7o3+Kg4dBz3vjQgPAKr/Qcduz4AnRSX78xg/DG3ieCdXrakBy:CII7VKgaBzfjQ7aoZz4AnwoxgK3izIk4","tlshash":"f832d7693290bbb143da42db743a6740f3314578b5422868f02cdee678a5e8361b3fb5","size":11438,"data":"","first_seen":"2024-06-01T04:10:35Z","last_seen":"2026-05-02T05:47:14.214445Z","times_seen":6796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2025/05/AOImmigration-Favicon-1.png","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/AOImmigration-Favicon-1.png HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en; _ga_P3FBKEX06K=GS2.1.s1771850429$o1$g0$t1771850429$j60$l0$h0; _ga=GA1.1.1488666867.1771850429\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 06 May 2025 02:06:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12009\r\ncontent-type: image/png\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"2144684b4b3d55233fdc3b7a7c4a9be3","sha1":"2a1aea6f043675180dbf58ec9779d991d33c0f8b","sha256":"bc7e8231a7d6b08ae00579581c545198ca1b4bff6777f92ea0aaf3bf353cf320","sha512":"9269560c8590f864d5a8e247785a7dfa9edf68c2af2de8133647084892e1edde28d928ccd1cae4f87418494afee05f8d3878c40f92b940d553406f151a2b6801","ssdeep":"192:kdnTSovFeRmm5wjTA0csi5MeT9VeWHC9IKQ+ZqyipERzr+siuK:kpS0Fek3TxFiqaHC9NQerqmH6uK","tlshash":"7542cf4fad245c3818c19aeaf40cb4e7e983c55e19df254ee8d9c8b4c12239c12eb1a8","first_seen":"2026-02-23T12:41:01.69447Z","last_seen":"2026-03-28T09:27:24.8581Z","times_seen":4,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/css/style-theme.css?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/css/style-theme.css?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:46 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4181\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14798,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"909b573ce5329b5f9da8b6324ab2c286","sha1":"ae3dd969b4ae550a8e7178816ecb0adaa258d88b","sha256":"aa7ee3c4d267d534eb9b22123c81e0822ccc56aee048609a9bcc97a35d269563","sha512":"921d387c93311a7562444791c0655a07d6baad47080ea12f78c48ec0ddc71361e45416a15c213ca3fc650146e9b23fed0123acf93002cea8c26f4ce12539e9e6","ssdeep":"192:jPQo5ItLFsLSxUH1PXH/vnKRF6KossjwNqyYjfpIxAF6sFC9U1e3FrwoJxMO9:jPQoGtay9YjO8FoFVJF","tlshash":"106240d72a770448a5b2a33c6e57b6a532594187c14acdf8ffa4e018ef8d2d124a3b4d","first_seen":"2023-08-24T22:45:34Z","last_seen":"2026-03-28T09:27:24.914006Z","times_seen":11,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.29.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.29.1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 05 Aug 2025 05:35:09 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 9917\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":53358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53318)","md5":"c61fbf45cc8641428e54114fb7938823","sha1":"41dcf5a4579d5826fed444bb7f6f8d08bc40942d","sha256":"c55c9f909dbbb493741265059b38a924c641d9c6d9a65eabdf06259d1969d4b0","sha512":"6464a49fbaaec8e9cd35cd27a68d194dcf8849fc4ed9c314ec85b446b600c4a2554e73f919d13861f4f4218e12d96bd0b69c3cb655a9b5dfe2a16daf9836782a","ssdeep":"384:hvrJ9/vmyeUaEMoZ0qk0e/RmRA5Cz9TfikvmGkvmCLldlRaw2ksFrOk:JLRdL2t7RllNL7skk","tlshash":"d033fb623d13b269226f442b82d7364c526495c1ee0376d9fa04c523dafede63b36c1b","first_seen":"2025-05-28T23:40:12.510828Z","last_seen":"2026-06-08T16:25:00.940521Z","times_seen":2155,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aoimmigration.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 00:06:22 GMT\r\nexpires: Thu, 18 Feb 2027 00:06:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 477247\r\nlast-modified: Mon, 15 Sep 2025 16:31:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50216, version 1.0","md5":"b577bb8d8c25082a9a50522f5ec995e5","sha1":"b3e5bd7b3c40d97eeefad7837daa986857596070","sha256":"186836b74ceac07b2764c07c0379420e3014efb30fe918461c235e0ef6cbc4a2","sha512":"54d26a07921bc6ea7c90b3d810c3e1e965e6dbc227b002cc385c07d2f3878ec42c7580663b8663638d7cad3ff50a8402dd64673aec5452d26d30760fb5c871c9","ssdeep":"1536:fTniLxNYt7dypMNb88NcWU5a91c+D+ZXA:Ti1NYtRyp2g8iW4atkXA","tlshash":"4a33f10bc7bbaa5ec58c1bb5cd55d311a980b0f1c028bf2724230b8537a899c62b65f9","first_seen":"2025-09-17T00:16:45.72892Z","last_seen":"2026-06-08T19:11:38.648469Z","times_seen":47186,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":163,"dns":1,"connect":27,"send":0,"wait":91,"receive":9,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aoimmigration.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 00:01:26 GMT\r\nexpires: Thu, 18 Feb 2027 00:01:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 477543\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-08T19:39:48.069933Z","times_seen":281392,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":80,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2022/01/mwangi-gatheca-qlKaN7eqay8-unsplash-scaled.jpg","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/mwangi-gatheca-qlKaN7eqay8-unsplash-scaled.jpg HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 11:45:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 873843\r\ncontent-type: image/jpeg\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":873843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2048x2560, components 3","md5":"aff4bac6f36e956ccc1e8b875ed273f1","sha1":"6bdcbabf45b7d88df9651624c6d4917a48b154e9","sha256":"7c6c5c9fbf39520f396c617b8277356c17575dd0b093b26298efa6ca7e355b3e","sha512":"227b74f31476d7d0e2d7f5ff9d9f5860336396e4cc2d1deed22da4cefcb5a15240ede6075d22026a0035b658e253855b65eaf173e08db18a889430b08393cdd3","ssdeep":"24576:DdD27HXmnZ7l3AxagUrXzXHeu1lfbJrjCB8B6:ZwmnbUJUfHeOlKl","tlshash":"c40533f22f592957ac970a74d0f85fd058b58e20ebb01576cda3b710606ba9837f4b1c","first_seen":"2026-02-23T12:41:01.703828Z","last_seen":"2026-02-23T12:58:23.834816Z","times_seen":2,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en; _ga_P3FBKEX06K=GS2.1.s1771850429$o1$g0$t1771850429$j60$l0$h0; _ga=GA1.1.1488666867.1771850429\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 05 Aug 2025 05:35:09 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 691\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1394,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1354)","md5":"36b0137c4131cef52feef5ac0f266c20","sha1":"4f4d53eb3ba85597b5690e4b926d35c6e5173058","sha256":"52994ca03f2fb13fa067938c393826e483159e29dc1a2eda1f498f15b0152230","sha512":"160b57eccd5e66a40bc468596106c92f2e0484c35c9c6d50c6a5687ee3505a99db09d2b15609af051e418168539d7c112be94265c5ada19946e3c76ff6364b13","ssdeep":"","tlshash":"5a2103f370a3d8ee48cf148a35522d16f1570c59b885a01ef5aa08db3472e853362638","first_seen":"2025-05-28T23:40:12.52701Z","last_seen":"2026-06-08T16:25:00.973697Z","times_seen":2034,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?display=swap\u0026family=Cabin:300,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i%7COpen+Sans:300,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026subset=latin,cyrillic-ext,latin-ext,cyrillic,greek-ext,greek,vietnamese","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?display=swap\u0026family=Cabin:300,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i%7COpen+Sans:300,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026subset=latin,cyrillic-ext,latin-ext,cyrillic,greek-ext,greek,vietnamese HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 23 Feb 2026 12:40:28 GMT\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\ncache-control: private, max-age=86400\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76967,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b6e5b5ee224c61a39379d4e3ef984d86","sha1":"c17bf046379f92673ab660fb34b85bf824df93ec","sha256":"b30301e52066b4ef42602b55ba1c92f30e32b95dce995cc2286da85806e45bfa","sha512":"a919b7daefb6059451a0fd898eb5819487f721cd580ecc621e0775a3d2f39f8ebf3b6e578ae37235b4bfd5211415709439f4c7460a9c65f45fd056a8ee080f2d","ssdeep":"768:OScpSwo34M8Av3keKcZd4oIp+6hnwYzFCuVh:AZAPkFc34ZpVRNR9f","tlshash":"f6733ea104271440aa435dd233de7e35ee0fa2617044c0b9abfd4bdaeedad6a637435c","first_seen":"2025-11-08T19:47:12.733185Z","last_seen":"2026-05-31T04:01:00.492753Z","times_seen":9,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":114,"dns":1,"connect":8,"send":0,"wait":24,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/css/switcher-style.css?ver=1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/css/switcher-style.css?ver=1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:47 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 949\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2944,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f73af466548b1671e5597f51718101f8","sha1":"e82a124917517770b35767c4d133afc31937c5f4","sha256":"c097d5faa09a4e8c9d4de31678f2e3d24fcec81f56b416d549676673f87ce283","sha512":"b87eec940208b7620733c8fc2029fd1d8429caef9a320b28fbffd30dbac4445cd69d328c1187fd1979ad9732293722b99413210a1b18a63a3ad954a0b6e93adb","ssdeep":"","tlshash":"73518df396b6a505b81be2981c45430822384172e54ec97c67eb307ceeb93d96c73e96","first_seen":"2025-11-03T16:28:03.012648Z","last_seen":"2026-03-28T09:27:24.851394Z","times_seen":5,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 07 Nov 2023 20:18:51 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-08T19:35:11.340355Z","times_seen":895864,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/elementor/css/post-780.css?ver=1771835510","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-780.css?ver=1771835510 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 23 Feb 2026 08:31:50 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 600\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2567,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2567), with no line terminators","md5":"1d27ab607825592afaba782b58839688","sha1":"c4aa9ae15c78e63b88de134165bd71f6157e940f","sha256":"934219a6b04fae2545657bc2b4d5084ee28c425239a0bfa1b601711e79ff09c5","sha512":"8bde40cefbe70e6adaf025587eaa66e7cd63e51cb60cac767abf99c6582ef25ff52eaf2ae456a31d6cc46f558f0db54c3b66cb10f25ed714b2f71c2b70593ee1","ssdeep":"","tlshash":"565104997c535011b21f613f8593999c62388cdad93ae3c7f8749217b079eb637a0e21","first_seen":"2026-02-23T12:41:01.712873Z","last_seen":"2026-03-28T09:27:24.899962Z","times_seen":4,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KML926F5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtm.js?id=GTM-KML926F5 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nexpires: Mon, 23 Feb 2026 12:40:28 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 23 Feb 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 111046\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":322694,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"181f49ab2552c2b2b4a8129005d40626","sha1":"b6ec2df5d5859827553ac6da6d691e603dde9570","sha256":"c82d59bbf03b827c3a540e382329713d73405144b3eaf433bcae0f59c0079104","sha512":"14e8e054a498a414a7cb9cea109a7527306b47d737806ad57b5e92c44d77a013461f885cc2045f7c0b965ce3ad1250a38c82cc1a84611d2d21ba9d573c717c62","ssdeep":"6144:OmO7CUy2p3J5NYyv8NyI7pNH08pddlm2rEmkGjp:CuUy2pdDv8H5DrEU","tlshash":"e96408cdb3d6706693a3a478403f118bb17b7992e84cc899f186d8d42d70a9a4277f7c","first_seen":"2026-02-23T12:41:01.714915Z","last_seen":"2026-02-23T12:58:23.760594Z","times_seen":2,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":79,"dns":72,"connect":20,"send":0,"wait":41,"receive":50,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustocanada.com/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"nexustocanada.com","domain":"nexustocanada.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: nexustocanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aoimmigration.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aoimmigration.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://aoimmigration.com/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2\r\ncontent-length: 373\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"nexustocanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2022/01/jeshoots-com-LtNvQHdKkmw-unsplash-scaled.jpg","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/jeshoots-com-LtNvQHdKkmw-unsplash-scaled.jpg HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en; _ga_P3FBKEX06K=GS2.1.s1771850429$o1$g0$t1771850429$j60$l0$h0; _ga=GA1.1.1488666867.1771850429\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 11:45:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 287582\r\ncontent-type: image/jpeg\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":287582,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2560x1707, components 3","md5":"c235f82cc30654f293f415da0977ddb7","sha1":"d3b718d4e00177ac483f0ac3c254f44bc1c1b2f4","sha256":"e73064a9d861b9219488a6ab6052b708237cfdcb7deeda60074ea0a58f06a5bb","sha512":"719d16fee6c65d18c9276acbef6b2ac1ae7f90c2322fb97542e14992f7b7f933737dd41d51e72a79a3dc9054e3ffa5ad401157c83d49c504de74cb87f4c1c534","ssdeep":"6144:skJMzFtTJ6HxoSZcfOFDuqJK4tvupS4vUNxiCd5lD9:skJMBtYH6SZ6OV/954vUNN9Z","tlshash":"e75423271f2141b3c12707f662c4b30582a96760e4f3d48babf1ba92768f75397c1b69","first_seen":"2026-02-23T12:41:01.718459Z","last_seen":"2026-02-23T12:58:23.783548Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-23T12:40:27.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlink: \u003chttps://aoimmigration.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://aoimmigration.com/wp-json/wp/v2/pages/155\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://aoimmigration.com/\u003e; rel=shortlink\r\nset-cookie: pll_language=en; expires=Tue, 23 Feb 2027 12:40:27 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 23 Feb 2026 12:40:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Yoast SEO:26.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Calendly","description":"Calendly is an app for scheduling appointments, meetings, and events.","website":"https://calendly.com/","common_platform_enumeration":"","icon":"Calendly.svg","categories":["Appointment scheduling"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"MailChimp","description":"Mailchimp is a marketing automation platform and email marketing service.","website":"https://mailchimp.com","common_platform_enumeration":"cpe:2.3:a:thinkshout:mailchimp:*:*:*:*:*:*:*:*","icon":"mailchimp.svg","categories":["Marketing automation","Email"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Elementor:3.29.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Redux Framework:4.5.7","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":100048,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832), with CRLF, LF line terminators","md5":"02618b39f7a69e728277b02c9dcf602a","sha1":"5057a1d3f0e475cd53e5606818fa8a8998c1ddf8","sha256":"fede6ef2bef7bb9a2efe1211abc2e48013c3709f3b2f8805d6c6ca4dc5926e55","sha512":"895284ade7d783b0e5516af6c3e969657138a8070639b762c59abe2c338f41adbc469b05b400950cdf8676cc55a699225c6fef7337abe2b7e971e400c3af2c53","ssdeep":"3072:KiYiQ4iVWDLd3Hk8ic/8KCg1o9uOThq6miBjC0:RDLd3U","tlshash":"29a392b2748d843a52ab03cb50327308e0afcd39cb12e8e5f6fda27957d5d953653126","first_seen":"2026-02-23T12:41:01.721107Z","last_seen":"2026-02-23T12:41:01.721107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1242,"timings":{"blocked":385,"dns":153,"connect":112,"send":0,"wait":471,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/css/responsive.css?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/css/responsive.css?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:46 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4213\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15829,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ecbf8e8ed64cdc3170646f75caae12e9","sha1":"18bc19317767ab4fe3a0487565cb249026d9de72","sha256":"b6ec4f88520e3dd4b0a90678330910040dfa3ed2af51bffd784e68336f19a9d4","sha512":"6162e0a609b8ad48520ceb1e4ec50f682a248b1e669b68e96dbc47462852331456ba4494bebb8c5e194b2dde0745efaf2c00f639f80200f6d25b8684319f607d","ssdeep":"192:pGGf5AxcTw/Z4wSFyX6LA/eHicz5daYCsCOf:gENFu6","tlshash":"9362d0ceb9a520493552b665acef335021b6d433da4ddad2f9e1902ccf9d3e14d82b0d","first_seen":"2026-02-23T12:41:01.723458Z","last_seen":"2026-03-28T09:27:24.871969Z","times_seen":4,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustocanada.com/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1746500346","fqdn":"nexustocanada.com","domain":"nexustocanada.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1746500346 HTTP/1.1\r\nHost: nexustocanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://aoimmigration.com/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1746500346\r\ncontent-length: 345\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":104004,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"nexustocanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustocanada.com/","fqdn":"nexustocanada.com","domain":"nexustocanada.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-23T12:40:26.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexustocanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://aoimmigration.com/\r\ncontent-length: 274\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 23 Feb 2026 12:40:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":100048,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":911,"timings":{"blocked":395,"dns":156,"connect":115,"send":0,"wait":121,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"nexustocanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/style.css?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/style.css?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:37 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":152557,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (326)","md5":"b879e4b2aac19f829101087893ae1176","sha1":"1c450c290b27b37f97c4f3dcdfe468d9fb6cdb39","sha256":"896c5ebb663327f1f2ad35d41b04280759eee1d06f52774b2a38029561b089aa","sha512":"e8a7760c87adb7e7d89b0c0a7ab99673b553cae3a47017bca16bdcf6754c09966b93e719a33f9e5d7fbfaeb05f0817019345c96b26a58266875c861f12c36e91","ssdeep":"1536:p/PuPsdNeEX6H6D6E696G2Q9qkPbsFhQSTIuBcycYJtxlBqYaS0thAj+twO9ddbm:tPuPscy90Ptiid5s87I+G","tlshash":"cfe34fda52751804752be79979c26769223c9093e92ac0bcfbf6600cdec97d81163f8f","first_seen":"2026-02-23T12:41:01.726002Z","last_seen":"2026-03-28T09:27:24.92746Z","times_seen":4,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/nice-select.min.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/js/nice-select.min.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:48 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1078\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2942,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-06-08T12:06:52.051619Z","times_seen":9187,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/switcher.min.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/js/switcher.min.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1206\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2765,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2765), with no line terminators","md5":"aa65fb15d3b19f50d706d5419f1d1e22","sha1":"98ad9345b42c6938f8eb9aa84678541e324472a1","sha256":"2d75935b4147dff5207a04e938b974b49219bc4d80d3e5ce5dee417537afcc8e","sha512":"898da905e592b4bdb5e8435f86c799180442f60e921336bdcfa0c39914dc6f105eeeb8c13366fc31cf0bb6dc4fd89c0d336750557083d833d8ed7cd945ae1fbb","ssdeep":"","tlshash":"5a51860b70c0f46e03963368121f207a756abf69a455d93cf829f4e1ab7454a0a73fb9","first_seen":"2023-03-07T12:57:51Z","last_seen":"2026-06-07T20:40:29.442565Z","times_seen":466,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1746500359","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1746500359 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 06 May 2025 02:59:19 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3457\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":23625,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"504c5371fdcae9fd8caaf25e08097659","sha1":"4a19295298ee5610a4de18d4ecb3ce2550e5c6f8","sha256":"7c932410db7b45ecee626999dab9f9714950bba9c5f50304f1aee2264efe5f7a","sha512":"b9ac4263e10aab96ffa309bdf6ce1eccb01cd97b3221a0e7c3ce93962411e633095601654fcb313f0cd844a3753a56ea116f0d121792cda59e7613ecb63e6389","ssdeep":"384:bUjLUDUyUfwUkURUPj/H2f0QdejO2HfVhctjdFkfGK/sjckFfXbOLj7jSfo8B6j/:bUPUDUyUoUkURUPrH28Qdea2H9hctxFY","tlshash":"f5b2aa91545a190163934cc673ca7f21884e6089f085d9ee5ffd18a8adf7e2633a139f","first_seen":"2026-02-23T12:41:01.731081Z","last_seen":"2026-03-28T09:27:24.833814Z","times_seen":4,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aoimmigration.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 00:01:26 GMT\r\nexpires: Thu, 18 Feb 2027 00:01:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 477543\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-08T19:39:48.069933Z","times_seen":281392,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":120,"dns":0,"connect":27,"send":0,"wait":42,"receive":38,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustocanada.com/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"nexustocanada.com","domain":"nexustocanada.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: nexustocanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aoimmigration.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aoimmigration.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://aoimmigration.com/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2\r\ncontent-length: 373\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"nexustocanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/css/jquery.fancybox.min.css?ver=1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/css/jquery.fancybox.min.css?ver=1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:45 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4233\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13735,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13734), with no line terminators","md5":"35d290afd71a6053d8195ea13170b4e9","sha1":"a64676403bb5c23f9800963b0b8f0475b532601f","sha256":"e467f75601e845da217ae845b688b227a19fbf1e8fc776a42a4905869496d2e2","sha512":"0136028681f47450835a9bd6345bb647c95f2be3e963980e5b5e355f3cdc602772313640c5d9b72ae71252bbe8099b11de5663f3fde49b71a5170e42959f7788","ssdeep":"96:tGA07/mPQRZa6f3sNGzssDH7jGSWWf8+WDJT53RjRuCicfMAJpEbyZh5fN2WdZ:tVQfXcVa7KWdMT539MCeAL55fJ","tlshash":"b0524e63a140311c903bce21d7df8948e279d55266221affe68cf919cbc7be912d62c6","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-06-08T14:51:02.882553Z","times_seen":6342,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/elementor/css/post-155.css?ver=1771837490","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-155.css?ver=1771837490 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 23 Feb 2026 09:04:50 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 574\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2489,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2489), with no line terminators","md5":"9f69a1091da5df48bd21c0cf00a852ba","sha1":"0b4f12b7255f3ea811b8a64fd51da2ffb7136926","sha256":"cee5682966f16b5fa655bf62c338c9d311cc0d25177d20687321e0cbe9ac05c8","sha512":"0e3ed36231e710c79918e3dadea56fe71d374a8b1476d742504b8bd1177b58c3168f3796657a425e80e6b54c80eb2fc07d8bff1d54005d64c88ccde409a56864","ssdeep":"","tlshash":"3451df897d239014723f295b9003b2ecb5361ce9887d73e3e9292053f572db233d8a15","first_seen":"2026-02-23T12:41:01.736934Z","last_seen":"2026-02-23T12:58:23.821252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.1.20","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.1.20 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 05 Aug 2025 05:37:20 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1794\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7418,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7417)","md5":"aeba37887d17e5ed0e8939b72abd12a6","sha1":"59747da2f95a0840cd2675f410e94356eaca6c0a","sha256":"e1312a65ba5e316f4236319758778fafdf349dc8cb26efee04bd716cda9590df","sha512":"b41b80fb202ff52ff28c7c8f9c53474d7aa76453c1f21dd12d1bef295eee6e554cb80e212d48154a9d7c64597c65084c67bc9ca5cfd2418524c1f8f5855f17ba","ssdeep":"192:8USu7icfgjw1sGbXIOjS5MLE88slOhygk:ZdDzl","tlshash":"4ee1db23bb37b3481577e53ea2ce6bb87275d2a1d2030d99e4f1a218d3de994172258c","first_seen":"2025-01-22T11:51:23.473769Z","last_seen":"2026-06-08T11:37:10.773013Z","times_seen":8271,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 11:40:47 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5422\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-08T19:35:30.278031Z","times_seen":825703,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/css/myvcan-style.css","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/css/myvcan-style.css HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 06 May 2025 02:13:46 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 7678\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":25122,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bb5d10b46262520e685b10073e473543","sha1":"c6788031dfc1cdc7b2f21d2db5cef610ca2d9c85","sha256":"1c341112c307087b4d8108aff82045655a9539a342f38190ce56032e931f0a22","sha512":"75b9ca784741408788aacc00502770f64de0e59d8400cfca946848eb98afb910f343aaa65ed5a6d015a280dd8d2264d64ad6a88dbf992dbc10a7b3071316fe3c","ssdeep":"768:S6+FTSqayFu9FkFFFg7ZFE/gBJjPODIH+F2FSKN6:m9S689GjQZu/+psIH+kQ66","tlshash":"f3b26453aef31504b54e45997febb778262c8093564e88f4fe90360ccf892da54a2f4e","first_seen":"2026-02-23T12:41:01.742108Z","last_seen":"2026-03-28T09:27:24.867693Z","times_seen":4,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/popper.min.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/js/popper.min.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 8577\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20455,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20322)","md5":"0c2f13e8454526f9da35b62c62aabc14","sha1":"95eac1b7cabe279d8de79cf8947c83434edb1a4b","sha256":"7a3e9267e00aa8a74981c9f9aa32f58f5b489dbb1cf89f92c42b8973f718e061","sha512":"2842c23607f7993e2ae308f24112fc19581d9e2ad96eab6a2b6bf0a36f862213c2f6099338856005a1c899cf10eac220815032e29a1f64171438df4a2aad38e4","ssdeep":"384:f5LFrVVVnCQvIR/CFU4hHPV4kdxXvYqo2D75zCx+vI2am3MxGpGTgd/9jt9+Db9X:hNVVVnyiU41xXvlD7wx+v0xyGTgnZO9X","tlshash":"8092a2cc3294b06647e791a7a07f960eb2339875650e9410f299f2e97c30ef9913bc79","first_seen":"2023-03-07T12:23:17Z","last_seen":"2026-06-07T04:00:15.063422Z","times_seen":87,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 15 Apr 2025 20:14:10 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 8375\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-08T19:40:00.480331Z","times_seen":299076,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/fonts/fa-brands-400.woff2","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aoimmigration.com/wp-content/themes/visarzo/assets/css/font-awesome-all.css?ver=1\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 68240\r\ncontent-type: font/woff2\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":68240,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 68240, version 1.0","md5":"921f1150167369cf4c400135a4905728","sha1":"9b0c2c518f8b97b3ff7cea34c565fd4e70bb7640","sha256":"8386356e1d512f570aac1b4883b928fe4bfd649c1d54a4d0f618357359cd3b74","sha512":"089005ff400711809b8e333034b7f5215a545a48bcb632003e7c5d8b980f715c07992fe1357a15c97e5ad64e48d4723edd02526d66be2d4bcafbab1087bd04bf","ssdeep":"1536:jajKJxgZ378W2pR8bBaXVnUmVT/QDYL34B0nQ:hJxa378nR8bBIVUmVT/QUpQ","tlshash":"7d630222f5f1903a51e4023566e7758f17da5c5f894a38888047e62c7bbe10da7ac2ef","first_seen":"2023-04-16T06:06:55Z","last_seen":"2026-06-07T05:23:45.504018Z","times_seen":604,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/css/animate.css?ver=1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/css/animate.css?ver=1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:46 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 8081\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":82804,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"581a3f4b4ba951c8f03320a923c91e71","sha1":"2d15b83d5a3a626a77bd3fe6835ae091ad5e501f","sha256":"a69ed40cfa329b63fab8a56677fd6eded4569ff1d815c9d25531ef35a65e062b","sha512":"eb520dada60da5724a49a2a8fe64de01393d5c0aacd8e48eda998ed419fa492565a15240d691febb06d53f856377b043a8e64f353c8209da0d7a704be737c4f7","ssdeep":"768:sruGuwpkfTf4ucuAfFfoHzfSf/fhfzSSSefZfW:DfTfsfFfoHzfSf/fhfBfZfW","tlshash":"8c834dad2991114453778a1993df9e78263ce1631826acef73c2588fcf46fac63c9607","first_seen":"2026-02-23T12:41:01.74878Z","last_seen":"2026-03-28T09:27:24.870278Z","times_seen":4,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js","fqdn":"s3.amazonaws.com","domain":"s3.amazonaws.com","tld":""},"ip":{"addr":"52.217.66.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 20 May 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:6E:24:DA:38:A4:1B:D7:08:C5:38:4D:E4:0F:23:5C:25:6C:07:22","sha256":"35:22:88:53:F8:1C:C9:41:3D:8C:59:1A:B2:A9:9D:DB:1E:0B:3D:51:8E:EC:0A:47:5C:FD:28:EF:42:DD:69:E6"}}},"request":{"raw":"GET /downloads.mailchimp.com/js/mc-validate.js HTTP/1.1\r\nHost: s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BmSMJK2UAEq+bcglYkniq3dp7sBFjC6Jb8kwZuHsYviS1apWtJyL1q49QTJHY6Wo87QP3R9SR/o=\r\nx-amz-request-id: MB31WV8GDEHCD32M\r\nDate: Mon, 23 Feb 2026 12:40:29 GMT\r\nLast-Modified: Mon, 20 Aug 2018 17:42:38 GMT\r\nETag: \"6465dd4a8331265e6629cd069e03504c\"\r\nCache-Control: public,max-age=2592000\r\nAccept-Ranges: bytes\r\nContent-Type: application/javascript\r\nContent-Length: 143249\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":143249,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32132)","md5":"6465dd4a8331265e6629cd069e03504c","sha1":"581e1ae78452c7433d842af8e83afcebe36f17a6","sha256":"b15aceb04dbf5604df5617cfe984f48479cb131c1df02825d1c24e9f35d01857","sha512":"f8d98f3fe0824b943e225d40a68646cd55bb7154af30c5fc7ed076e5b156249e36c12f4b8202d506da9775bc7bd3f822d78eb31510be1f167a74b72dd7cd3e54","ssdeep":"1536:fYcvR3VhH37Ha7EmakRhIHAZkCDy08otU6myJXXxMZyYk0AjrzCqlKDh9YhnaTd6:fY8MaW2b+UELKTqnAditoKp/sPfC","tlshash":"52e32bddb2c5b0225bab30b9506f540bb276186a680c8460f16cd8f5bfb4e49a177f7c","first_seen":"2023-03-07T01:24:09Z","last_seen":"2026-06-08T17:37:23.035741Z","times_seen":5947,"resource_available":true,"data":null}},"time_used":841,"timings":{"blocked":214,"dns":15,"connect":92,"send":0,"wait":172,"receive":187,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/visarzo-core//assets/elementor/js/elementor-custom.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/visarzo-core//assets/elementor/js/elementor-custom.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 06 May 2025 02:52:39 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 495\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1493,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"707f8d428d1d2bf1b195f73971c66045","sha1":"730b5be54e676b6861f888c21dd4edef21cd2cc6","sha256":"4a1fb535cff7d33e2cc0904f4962eccaf8d89ef5a591f605a33266ceee7ee73c","sha512":"37bafb0cd0d102459fda7295e47cbb26e1adcb996450c90c78a4a5f1ff8d6b655e34e75d4cb60f10e3301346c241e96053c6bbb0354f1ad1291ab6a09ba843a5","ssdeep":"","tlshash":"60319b1a7459401898bb33d58ea6dc14ebe5120fd001d9c3babc22806f794097aebf8c","first_seen":"2023-03-26T05:07:57Z","last_seen":"2026-03-28T09:27:24.831Z","times_seen":11,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.29.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.29.1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 05 Aug 2025 05:35:09 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 13613\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":32876,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32836)","md5":"946923a796e0cdeb2a08bb40792911f2","sha1":"2865c05e4477ca74a492e576cc2920f5aef8299f","sha256":"30d538521936936fc3a409fd375d3e01ba5d841ac4db9adeaea6ddd81a849fa4","sha512":"e42bb3347d6e9b963f63e4b9e641f4c7fc59a95a0a0043edb30fb57182168e512c5d718f835b4e5ef77a40dc55c6df2454cc636f06ba761c0cf116e680ae042a","ssdeep":"768:NRdRMtJR8RjDKv//DQl5ZnfVgbpM+MpKEAzBc5GlTSeUsveOBNU5aG9g3fWLJhoh:NRdCtJR8RjD8/0fVliEAzBc5UTSeUsGa","tlshash":"4be209527296d4a2069f48a3f0331119f3765dd9b80af0d8b2acdce1a475f877361b35","first_seen":"2025-05-28T23:40:12.448154Z","last_seen":"2026-06-08T16:25:01.011338Z","times_seen":2438,"resource_available":true,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aoimmigration.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Feb 2026 17:41:49 GMT\r\nexpires: Fri, 19 Feb 2027 17:41:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 327520\r\nlast-modified: Wed, 10 Sep 2025 16:56:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28320, version 1.0","md5":"44691444dd981153f160a086f24bb7d5","sha1":"a104b4cdabfcc943b559a3967d531e56c0955f17","sha256":"f51448b0b7f024d139fb7598d21b4e06e8174268ac93fc26cc2d4196144cb672","sha512":"6243c4d625704ebb0b5acfa2318a5efac5329ef5640e8825a8a103fb1c6c0042b3e48ff90781e78fb015abc3b9dcb417c957ef034f61949f07498fb73a40612d","ssdeep":"768:oqEBPQTG+amXUdSgtBWKwLbTNvi7T2en5o19Y+dLjah9a/Woxh:YlQTBxIXdibTNvIo19Xjuoxh","tlshash":"8cd2e12ee1bf62e4ab337d3f8ad7728cdf6f2c14088860475870ae63d4a17551196e91","first_seen":"2025-06-02T21:09:25.198343Z","last_seen":"2026-06-08T19:22:10.053244Z","times_seen":7316,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/fonts/fa-solid-900.woff2","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aoimmigration.com/wp-content/themes/visarzo/assets/css/font-awesome-all.css?ver=1\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 72000\r\ncontent-type: font/woff2\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":72000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72000, version 1.0","md5":"1dc5b6dd4bf409a6f919be38603f76a0","sha1":"388c52a87094578015fb41ebb9147821f0bb03a3","sha256":"a5587a9dca3673b604a8a0e144d268f3dcb180aac337e2b2e163704bc1fc508a","sha512":"e25c9e0e671bf5538cc0defcd3f8cd5f4ea207d9a9a5770f3d39b911ad072d445e7e9215f8be5e0ba0bac0c43deb1bce906d24d09d4b56f3ffbfc7a9f40a88a5","ssdeep":"1536:648zAGW4G78K8XEOtOpKOALDPiixJdb7K5nWWNm0KrTh:6Gj4G4HXEOQ+DPiyJdbuUrt","tlshash":"2763127c5956de41254f30ec28aa2f7f4ea0d0757519f2b70cd29a891bb387e84283a6","first_seen":"2023-04-10T15:45:41Z","last_seen":"2026-06-08T08:26:28.415384Z","times_seen":1108,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2025/05/AOImmigration-Favicon-1-80x80.png","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/AOImmigration-Favicon-1-80x80.png HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en; _ga_P3FBKEX06K=GS2.1.s1771850429$o1$g0$t1771850429$j60$l0$h0; _ga=GA1.1.1488666867.1771850429\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 06 May 2025 02:06:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2338\r\ncontent-type: image/png\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"a302cbe7a80fe7ad54ca6354e7521097","sha1":"2c5989ec946e85e1060c0abb42b97c03bd423492","sha256":"34d205c3382bfb42eb58fcc6d1ca91f0536ec95fec60c4f63223d8e289a2ecc5","sha512":"bfa332dd6213fcdc346c5c12ffff51bf5b4af6d5f1477668968149de502ac20cdaf267485ff55a7748eb3a036abc3fa6f5254c8443bbfb707912e60a437c9ff2","ssdeep":"","tlshash":"36414dfa95db4c5cca0e896e84f49600cd50cef5154252fe25e2f90e4cf2144e384631","first_seen":"2026-02-23T12:41:01.759615Z","last_seen":"2026-03-28T09:27:24.81189Z","times_seen":4,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.calendly.com/assets/external/widget.js","fqdn":"assets.calendly.com","domain":"calendly.com","tld":"com"},"ip":{"addr":"172.64.146.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"calendly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 15:39:14 GMT","end":"Sun, 10 May 2026 16:39:11 GMT"},"fingerprint":{"sha1":"16:64:6B:F8:6A:0A:F0:96:48:B5:6C:91:2B:67:4D:A1:F0:27:71:74","sha256":"F4:AB:C5:FB:7E:DF:93:B4:18:20:DE:80:89:38:A1:C5:41:B9:A5:46:2E:67:B9:03:61:1D:FD:0F:EA:5B:54:67"}}},"request":{"raw":"GET /assets/external/widget.js HTTP/1.1\r\nHost: assets.calendly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: 9d26cab99add3181-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: https://calendly.com\r\nage: 13\r\ncache-control: public, max-age=300\r\netag: W/\"ef3bf711963c747494cae07900aacd7c\"\r\nexpires: Tue, 24 Feb 2026 12:40:28 GMT\r\nlast-modified: Thu, 19 Feb 2026 22:21:48 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-methods: GET, OPTIONS, HEAD\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=pz_Hdkldv4eg6U9HJyFmQWcb16m_kWsNt5hJrSMwr7g-1771850428-1.0.1.1-gWHKdbOmgC_UMe6OArc4RBR_x5ATvLB84Y7_iaa7VSGly_hqbH.RQXgsJvOf2.5J_4CeaICJZmcbZaoEdppU2sDss2T.9FqOKZCSQNF2PrE; path=/; expires=Mon, 23-Feb-26 13:10:28 GMT; domain=.calendly.com; HttpOnly; Secure; SameSite=None\n_cfuvid=ofQDzjBa0wU.y9MvRMnaVu3Vm5lJRoVFopHZRZcOEJ4-1771850428482-0.0.1.1-604800000; path=/; domain=.calendly.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11438,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11438), with no line terminators","md5":"ef3bf711963c747494cae07900aacd7c","sha1":"6b2d3587f1f5267a3ba53b86f6ac8be41fafda10","sha256":"f80ce7415f7fb5c4bf1d8eed31652b1246241e4e3cef6cbf6c853b9a7e16dde0","sha512":"60eb78a3947c0aae48970e1756b514335f574773aea1cd68fd0c8dcd9ffd3c9527c95110f0c7ee4d089afa3644753fe4f1b4ec78d2e871616e621c9421569f18","ssdeep":"192:CII7o3+Kg4dBz3vjQgPAKr/Qcduz4AnRSX78xg/DG3ieCdXrakBy:CII7VKgaBzfjQ7aoZz4AnwoxgK3izIk4","tlshash":"f832d7693290bbb143da42db743a6740f3314578b5422868f02cdee678a5e8361b3fb5","first_seen":"2024-06-01T04:10:35Z","last_seen":"2026-05-02T05:47:14.214445Z","times_seen":6796,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":20,"connect":1,"send":0,"wait":69,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2020/08/news-14-360x300.jpg","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/news-14-360x300.jpg HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 11:46:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26239\r\ncontent-type: image/jpeg\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":26239,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 360x300, components 3","md5":"05dca4c9bd7bc332b71c276821d71fb9","sha1":"c320e3eb89d79c5d53f03ec3a4d250bb4cebc0af","sha256":"33338dd1079276f66ff9b72c3e883d85da110726796dc68e2ab8ee934e25985a","sha512":"d503a9718d675e99a9a0c1dc97d6c956f1464ed2dae9844446f2ec11899ad08efa0c458c1c0eb537c18a0c757f95788893516f2b8a7abe99ea43f0ee1b68b5c6","ssdeep":"384:9TqDWUablyuXOfLo4/hVqMVUhsV5iclr2BJnvDbHKDh4Q/mROvmTPrztsE5g9ivz:92DWLR+ftVHVdiUaTnidLm+gPaPXE","tlshash":"4bc2e1cafa443655e61d1c4ae153985c1e437b9ccac91b4a38baf5f349120edfe102eb","first_seen":"2026-02-23T12:41:01.762658Z","last_seen":"2026-02-23T12:58:23.795422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2020/07/news-13-360x300.jpg","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2020/07/news-13-360x300.jpg HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 11:46:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19658\r\ncontent-type: image/jpeg\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19658,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 360x300, components 3","md5":"df9166c0faa887796ab6917ed21bb6cc","sha1":"f9076b185724af70a28ee144a0f6da2ba9287b82","sha256":"cd2dab2a88efdc4ccf8543bcdcafbbb0d2316e792f8e734e80ac3fb01d1e5ffd","sha512":"025409d41847948f0c42e4f995c7374063081667f727a41eca5f0bcd059586f18a69ca0a431de15e68740c07ee29b393973a45bd39d4c59bb04ecbf954b56fa9","ssdeep":"384:XpZRGJSIEh5engZAiA16u+wPXG4W6mTxxgvr+K+dGNEHvKupgYC:Xp7OSI8zTAnW+jq6EPK7L","tlshash":"dc92e11d1e52b690a44c0f800973137e6aab3a955ef2d34a1bfece50e7138f88640da7","first_seen":"2026-02-23T12:41:01.764794Z","last_seen":"2026-02-23T12:58:23.833866Z","times_seen":2,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.29.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.29.1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 05 Aug 2025 05:35:09 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2659\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5700,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5660)","md5":"ce1be08b39ee243be3bfe131eaaeae3a","sha1":"1c69d2eae6441fec688c29dac5e1e1d3e2f8dcee","sha256":"daa996af776b05797cc92ccdea324c70b93d224159717e2b7586530246e7866f","sha512":"af0fc093f27cecd6bcaf0831b60fbda48c5f4150cc9e829db1a28194ed22f3160f31ab43a3c4f68c1c17702a646aa285651ceb5a16585eb70e2dae5f1d49102b","ssdeep":"96:BdrAtsNvDdfzjqj3Ntxl8O7AEQQ1vg+lsmejl3i7wVjLUVsc+2KBbZ7Qah88/2:fwsNpzjq3TNQWg+smeMs5QTY1V/2","tlshash":"bac163d41a94fc2b32e135d8e11b9734662ec0337c16f9c1fa21dce955e8ed183aa572","first_seen":"2025-05-28T23:40:12.529369Z","last_seen":"2026-06-08T16:25:00.9823Z","times_seen":2436,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/visarzo-core//assets/elementor/js/imigration.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/visarzo-core//assets/elementor/js/imigration.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 06 May 2025 02:52:39 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 434\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1192,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"25bd1a7b87d145784bc4899f29c1ab95","sha1":"ef61aa83612084ecca15e216218b6281ee7eb533","sha256":"47bbc809b4947da6b8e0c1ef4df40699ce9142212fa574b2439ae9309e9dfd62","sha512":"8d1aabb777c16142e2ad82aa43557733ca049b5245c287fa831b467be526aaf319f8d87982d01299d4acdc339baac095516e8ea789edf12d98f9007d06adab7c","ssdeep":"","tlshash":"1d21491a30a9414964b77b975eab6118d7e6021bc041b8937fbc22502f3541f72edf4c","first_seen":"2025-08-04T02:23:16.950949Z","last_seen":"2026-03-28T09:27:24.802724Z","times_seen":7,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/css/owl.css?ver=1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/css/owl.css?ver=1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:45 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1529\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5434,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ba0a6b4fddbd8e3b1d87280699871cae","sha1":"728051052b0ea5c516909c70bec7b32b126cf7ea","sha256":"bacfe8e7356d42f34d891ae2768259c47928a51f7bccbfe40ca057a55e37f4e8","sha512":"dbe3a5305273aee80bbed14094247d331e8f1495933960bf042705cfdc54d8a6b1b9ec13dd40f0c379192e3ee5307d9b8119166f0a61e3d2131174cadb7edfab","ssdeep":"96:15+VPKCDemllo7PZ2RUPKuT+8F/pgvYsuC1lrhxfr5BEO:15+VPKChleHT+ypgH1Rhxz5B/","tlshash":"9ab1eee81276114d341b83e81a9d571a3b3dd452e909cc58b6eb26098fcef58602fb5b","first_seen":"2023-05-16T17:31:13Z","last_seen":"2026-06-06T12:26:04.180868Z","times_seen":87,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2025/05/AOImmigration-Horizontal-Logo-RW.png","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/AOImmigration-Horizontal-Logo-RW.png HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 06 May 2025 01:21:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11869\r\ncontent-type: image/png\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 377 x 78, 8-bit/color RGBA, non-interlaced","md5":"c05ea524b37e1b1d8727ded4b2ee276c","sha1":"12c0d24115caa6f87d640edab12c12456f3140db","sha256":"0e1215ef493a94b0d8ed04ca1eb40c4f95d53a722e538fabe8777dd5f57e65e8","sha512":"d4d70641d1fe4e2bd4a0a9c2a823266fb33908819e192e4398f497197bf113202b06bf7896bf1977d3f4e4411b7ba39af983ccd25e667f9e1f571b186be1726e","ssdeep":"192:iFHwDyx0LzWB9TnwWeO4u9pJzXpnkU40qclBC9vGkXqOWUBD5EET1PcP4AuzZ5j5:i6z0NLkuvB1kb0qclavxxWUbpVc8F5Eg","tlshash":"d932c013b968c7bcae048fa0de534703fb3a6c206a6657f20055ebfd955f11996e1223","first_seen":"2026-02-23T12:41:01.770557Z","last_seen":"2026-03-28T09:27:24.818885Z","times_seen":4,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/visarzo-core//assets/elementor/js/testimonial.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/visarzo-core//assets/elementor/js/testimonial.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 06 May 2025 02:52:39 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 419\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1168,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"91081ebc5fcd0e522d70fb73c57cb613","sha1":"ff03928fee364eba8e6f89d1fb982278ca63cf8e","sha256":"8ec004f68578441e519e073010591d048690db94ad58bda3b0d85a7a3fba128c","sha512":"0edd1775c71a4e95b2c602646066ba799068731351c72ac40f4959966a7bf6b6268b253604ff80a4d5b6fb4abb0c0dd251baa3201f0d3632723a1c1a4c7f5f5d","ssdeep":"","tlshash":"a4219c1e34660055b4bb72969eeb6608d6d6161fd040a8933ffc71902f3541f32aef0c","first_seen":"2025-08-04T02:23:16.967207Z","last_seen":"2026-03-28T09:27:24.92478Z","times_seen":7,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en; _ga_P3FBKEX06K=GS2.1.s1771850429$o1$g0$t1771850429$j60$l0$h0; _ga=GA1.1.1488666867.1771850429\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 05 Aug 2025 05:35:09 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 298\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":489,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (449)","md5":"040e6140d0ae199eb06845c13c6f0fbd","sha1":"c00d25566202cdef353551ef616639c7d5d2c341","sha256":"210ffb0f1899e88bacd0977831dc88ca9ca076a4a0f8052509560ebd423a8c7c","sha512":"2d15d635205b66d1859d5f144044da65214af61ce551137e7fae55bd75ed732933eff23a1786692e1ac8862cff5fd7a7a1074abbf909edf0acb382346f7bc76a","ssdeep":"","tlshash":"25f09eb970d278ff240f04860a97102de5981cf5412520417eba44383a75fb4b36539e","first_seen":"2025-05-29T08:16:06.29076Z","last_seen":"2026-06-08T16:25:00.989526Z","times_seen":1789,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/owl.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/js/owl.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:48 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":85303,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (360)","md5":"54428880ec8df798ac3d666f5113c7ff","sha1":"9e43e74b8677f39e87f1b11be4d536c618b14bb3","sha256":"0402874ff311f284b18af9e4c453ee5bf0916a3b7335f0be52dcb54a1a31338b","sha512":"abceb872c8942d366a533c0c572e0e6e31d1b428ad2bc6fa1e746fd31811b6f8dfcd77814723adf44e1a8585436b511097576159b8eab40706b025e3158eda24","ssdeep":"1536:/PLoreUScogMjVNPP8aLMBJk8u9hKt1o619IYj1oJ0SQIOZ:/fHNPP/qJ9BoC9XplIOZ","tlshash":"e48383c5f36c261b422a31785e9e23ce713d412ad91118af7ca4e9dc28d546c836eff9","first_seen":"2023-03-07T01:10:42Z","last_seen":"2026-06-08T13:53:38.058096Z","times_seen":4300,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/script.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/js/script.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3143\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12701,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"7f2c1b8ed828aafb2e33cf7aa1cc80b6","sha1":"dbb2574d0011109e259d7f3770df83944c892e32","sha256":"320b21bcd1bced570e45b1e62eeabaa2025c48aae3da63f0609e2f98748405a3","sha512":"09f4f9a42b0b58216052191ef92ef7109adf4a2673b3d93f4c6ea089ab0a9215c45d920b2b9020f4aa662f45ed666d75d6d8022b2130fcd59b077abb93307126","ssdeep":"192:WLCpUNxFy0Cwcu5CvbwCdLSflCo62shPsC/jMKrKH6UZjYL1ogSUJJVNgStCnY1/:NrGfk2sFTrKTdgSUJdgSUg/vgi","tlshash":"7d42100ab4f520a2103771394bff5208776a440b8509ed21bd9f0ba86f8975d79fab4c","first_seen":"2026-02-23T12:41:01.77653Z","last_seen":"2026-03-28T09:27:24.904467Z","times_seen":4,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.1.20","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.1.20 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 05 Aug 2025 05:37:20 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4520\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11619,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11619), with no line terminators","md5":"620dbe4f531b1bbbbf5421ed8ada21db","sha1":"da90c231d9f68e3f7538eb515ee7d3c3c8d03150","sha256":"e7442478ebe71a402f96fae8bdb6cd7d9153c4eedede61c3b96f0966da2c1337","sha512":"c3ff6f9f0ff2cefdb59c61c6f8976723897db86027b48f47706168f77cdc977130c4d669dfc4523a44b8561c891a3aa075c8df15e898eec1eb5dac16622a10a6","ssdeep":"192:4v6DbN3SLFNjilRm5ReHKj2H8gH+gwnmMQwco/0MbYrdpb9pPkx:4v6DbNiVii2KnpcLpb9p8x","tlshash":"1732e988378776f056b36025947f761ab136ab74741c8850a21ad8e06db9d8fe073f3e","first_seen":"2025-06-02T14:11:02.01093Z","last_seen":"2026-06-07T23:41:45.61266Z","times_seen":2333,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aoimmigration.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Feb 2026 17:41:49 GMT\r\nexpires: Fri, 19 Feb 2027 17:41:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 327520\r\nlast-modified: Wed, 10 Sep 2025 16:56:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28320, version 1.0","md5":"44691444dd981153f160a086f24bb7d5","sha1":"a104b4cdabfcc943b559a3967d531e56c0955f17","sha256":"f51448b0b7f024d139fb7598d21b4e06e8174268ac93fc26cc2d4196144cb672","sha512":"6243c4d625704ebb0b5acfa2318a5efac5329ef5640e8825a8a103fb1c6c0042b3e48ff90781e78fb015abc3b9dcb417c957ef034f61949f07498fb73a40612d","ssdeep":"768:oqEBPQTG+amXUdSgtBWKwLbTNvi7T2en5o19Y+dLjah9a/Woxh:YlQTBxIXdibTNvIo19Xjuoxh","tlshash":"8cd2e12ee1bf62e4ab337d3f8ad7728cdf6f2c14088860475870ae63d4a17551196e91","first_seen":"2025-06-02T21:09:25.198343Z","last_seen":"2026-06-08T19:22:10.053244Z","times_seen":7316,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":98,"dns":0,"connect":28,"send":0,"wait":125,"receive":2,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en; _ga_P3FBKEX06K=GS2.1.s1771850429$o1$g0$t1771850429$j60$l0$h0; _ga=GA1.1.1488666867.1771850429\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 02 Dec 2025 20:16:11 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5657\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-08T19:36:55.008263Z","times_seen":263435,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.calendly.com/assets/external/widget.css","fqdn":"assets.calendly.com","domain":"calendly.com","tld":"com"},"ip":{"addr":"172.64.146.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"calendly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 15:39:14 GMT","end":"Sun, 10 May 2026 16:39:11 GMT"},"fingerprint":{"sha1":"16:64:6B:F8:6A:0A:F0:96:48:B5:6C:91:2B:67:4D:A1:F0:27:71:74","sha256":"F4:AB:C5:FB:7E:DF:93:B4:18:20:DE:80:89:38:A1:C5:41:B9:A5:46:2E:67:B9:03:61:1D:FD:0F:EA:5B:54:67"}}},"request":{"raw":"GET /assets/external/widget.css HTTP/1.1\r\nHost: assets.calendly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\ncf-ray: 9d26cab9ab2f3181-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: https://calendly.com\r\nage: 152\r\ncache-control: public, max-age=300\r\netag: W/\"fff8067a661e39cbaa9c1c587f676d90\"\r\nexpires: Tue, 24 Feb 2026 12:40:28 GMT\r\nlast-modified: Thu, 09 Oct 2025 08:44:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-methods: GET, OPTIONS, HEAD\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=Ot0sqFFuT7vuZbfspZTdWTV3vkPK8u.xKOxioNhcQOE-1771850428-1.0.1.1-1Qr_m9YJmJtq1iGIcipXfL8l2QO63Q9fD7u5sHB_bq1ljgoXfu5OWWaYTQQYmoPyOXfa4oq6ZsHa5qBLXBmOp3YcnBKvnyOzZ3w3HkYOZ58; path=/; expires=Mon, 23-Feb-26 13:10:28 GMT; domain=.calendly.com; HttpOnly; Secure; SameSite=None\n_cfuvid=vcWo09EYBKI6R6zmHmSUC61I4QNwa2l2c0c.hvpr2zU-1771850428459-0.0.1.1-604800000; path=/; domain=.calendly.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2461,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2461), with no line terminators","md5":"fff8067a661e39cbaa9c1c587f676d90","sha1":"b2bac426de8041c6a2dc42dcbb4048375f02d5c1","sha256":"a79d97b88b4d1d042cd34f2e46a1c79ce52f023728634bec0c6d65292895e174","sha512":"b95423685263f1dc99cdd2200b632d0a1022f2c0dda1f109db5e1fc31a769c9edc91c6002de9f441caabecf0035a53a0dfcbe248117850fe73431d0376114dad","ssdeep":"","tlshash":"7851ce99500120f7e16e9131b5c1695c1f348f6ad5633ebcb41c2f7a62ca5ce3de6608","first_seen":"2024-11-30T22:42:55.732251Z","last_seen":"2026-06-08T18:00:58.106529Z","times_seen":5409,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":19,"connect":0,"send":0,"wait":37,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/elementor/css/post-13.css?ver=1771835510","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-13.css?ver=1771835510 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 23 Feb 2026 08:31:50 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 373\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1169,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1169), with no line terminators","md5":"0cf14b65ab5a9c02bfeb498134a50778","sha1":"14ac890ba0a6e118149149d73c6a93bc4f5d9408","sha256":"e0816f7689f1ab7a99036159e65d1680f71d4acbfb0cc0b2c568946f76fa7228","sha512":"7ed786da2b91b2a4643e6bd5691d5b6b798adcee58f9ee49b4104f74cce189f47c908ccf3b48fda7af389053c708b348a70b60183f8e684033d82bd961ce6e04","ssdeep":"","tlshash":"c82125457a23d432e17b093f91d3b02c112cd46fa25f8edff41c9649f9bea462228647","first_seen":"2025-04-23T19:15:10.781802Z","last_seen":"2026-06-08T09:26:07.60952Z","times_seen":638,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2022/01/surface-8HPLpr3hebU-unsplash-scaled.jpg","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/surface-8HPLpr3hebU-unsplash-scaled.jpg HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 11:45:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 455960\r\ncontent-type: image/jpeg\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":455960,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2560x1707, components 3","md5":"a07a39cbbf2ed60dd18f5477d02dd187","sha1":"2e84bfc14874993e951805763a05e9499dc35cf0","sha256":"989751aa5722c3e148e91bdebb2efeaf7163de8a52fb2f829a8f51a1b4f3f449","sha512":"8ad3dccfe9c9f0334236b93323c1cd7a9da09d5180a3d4a3731a4aec22554db2ce2a7ad57c2f26baaddf3f4093716a89cabe5d74518a84bc4fc030f4a8480360","ssdeep":"12288:lHIBDHmxsY/9rMVKHCX6sZ0awUHS9zdlemrmYZ3/TPcLAa+Lb18:SB7QrMVqCX5ZS5hZPIid8","tlshash":"9aa423f70008e047f5153d7eee0ee88699a923f1bbb296902de5725373e94b0e09d6d4","first_seen":"2026-02-23T12:41:01.782324Z","last_seen":"2026-02-23T12:58:23.825221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2022/01/magnet-me-315vPGsAFUk-unsplash-scaled.jpg","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/magnet-me-315vPGsAFUk-unsplash-scaled.jpg HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en; _ga_P3FBKEX06K=GS2.1.s1771850429$o1$g0$t1771850429$j60$l0$h0; _ga=GA1.1.1488666867.1771850429\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 11:45:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 388911\r\ncontent-type: image/jpeg\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":388911,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2560x1707, components 3","md5":"3ecd1aeb440f64154453c68821599236","sha1":"cbe6240a2892b862a68b3c746fad325288c971dd","sha256":"00317f79baa2ffe55af4dbafcf93dec663e03187935556f512ef200618e776ff","sha512":"071c8d22ad6c27081f2e704b95a4ba1673038305dad3cf61368f23d6e7147d1a3e2c7916fa56049cab149502dce16903ba7a1969116532129fb1c82fa30410af","ssdeep":"6144:0oXCDgO5we9HG1ZreXVsulF6ytbupffjIioFqSLaJLJWdOTrSl8OBO2jH4654Kbd:0oXCDgO5xg1cOyopjIioFqoaJLJWQSlL","tlshash":"7e842394cdc10c6bec861c7a2bc38e8565fb3aeed1265d059dae488db04c9db8533e35","first_seen":"2026-02-23T12:41:01.784391Z","last_seen":"2026-02-23T12:58:23.813218Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2025/05/aoimmigration-logo.svg","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/aoimmigration-logo.svg HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 05 May 2025 21:32:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15562\r\ncontent-type: image/svg+xml\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15562,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e319cebbd1227fe4e03562adfdf79d4","sha1":"ebf191004e344c76cc47c6ad984f6e9a3077b95e","sha256":"94fdb04f8af25cb1a949884a260ed899e82944dc7bc2c0cbaf3da7d9e1639a2f","sha512":"71e75ba0113a66e81b3fcef2a95afa5196aedd627bdf72139cb8517ec1ca428c3d17ab1d78c4e4fad3cb09f0db9a8edd59df1a7929e8225ac446bd725829104d","ssdeep":"192:atfPFJjRz0cVPV1FQamgO9dJZ8nSVc2OvQtBItPNUKtHu99m/9v1Tu+:uZFQb19HZ8nSVfA6BItPN7O9A9V","tlshash":"39623d9153f8c73e9a038348dfaa90e53a8560d7d34a50ccf5ef57665f09cf0da22a58","first_seen":"2026-02-23T12:41:01.786431Z","last_seen":"2026-03-28T09:27:24.799406Z","times_seen":4,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/wow.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/js/wow.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2506\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6269)","md5":"105fb3799fcf14f1ea8fcff23f2686dc","sha1":"00a8a01378a8259b38cba29dc69ddf761450053f","sha256":"704ae255ab62df5481884eb0db69b552c686e7094b21581b1cbc86a9b6c3800b","sha512":"ebdee19d8c8ab3f2d751c753ccad4a0631c1a1520821682dbcc8d9555a42d48ef9d67e333c2b9854e3452f783e5b37ecac686e287fa0f9d2ce6ce42168e87ba7","ssdeep":"96:gGqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:N30suCYOVEE7ne4JqgpIwdh","tlshash":"e1d175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f3c","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-06-08T10:23:02.54831Z","times_seen":3578,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/scrollbar.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/js/scrollbar.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 15951\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":40547,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32009)","md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-06-08T13:53:38.113863Z","times_seen":3965,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2020/07/pattern-6.png","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2020/07/pattern-6.png HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 11:46:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 224537\r\ncontent-type: image/png\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":224537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1140 x 570, 8-bit/color RGBA, non-interlaced","md5":"206c71f2323d3700820f1bd0b2317a43","sha1":"ce82f2ef810ed58e437f0a3b7e1fe59d58f21aa2","sha256":"18842c2c6155018740096f55eb9075968bfeb33a68f3b7173b3a966729aee66d","sha512":"9e6fb9f5a49c99453f2163713c1f947048bf0ebf79d123c45a4eaf425b14b0ef13e84665e3a9dda14ae17efce62a653dc15c29a1a07598585e56b6b71411b2d5","ssdeep":"6144:7WBwK3s0aCidrN4bCVN9qPJiyUOpaLdrwR6tDv:6Bwd39ObkGJiyUYEwRWv","tlshash":"042413898982e0007a980a7f35f2ba5b0127f5ab5dda1f9458d9d9cb347d975ec30cc2","first_seen":"2023-10-31T10:18:07Z","last_seen":"2026-03-03T12:53:11.464788Z","times_seen":5,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":119,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aoimmigration.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 00:06:22 GMT\r\nexpires: Thu, 18 Feb 2027 00:06:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 477247\r\nlast-modified: Mon, 15 Sep 2025 16:31:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50216, version 1.0","md5":"b577bb8d8c25082a9a50522f5ec995e5","sha1":"b3e5bd7b3c40d97eeefad7837daa986857596070","sha256":"186836b74ceac07b2764c07c0379420e3014efb30fe918461c235e0ef6cbc4a2","sha512":"54d26a07921bc6ea7c90b3d810c3e1e965e6dbc227b002cc385c07d2f3878ec42c7580663b8663638d7cad3ff50a8402dd64673aec5452d26d30760fb5c871c9","ssdeep":"1536:fTniLxNYt7dypMNb88NcWU5a91c+D+ZXA:Ti1NYtRyp2g8iW4atkXA","tlshash":"4a33f10bc7bbaa5ec58c1bb5cd55d311a980b0f1c028bf2724230b8537a899c62b65f9","first_seen":"2025-09-17T00:16:45.72892Z","last_seen":"2026-06-08T19:11:38.648469Z","times_seen":47186,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":149,"dns":0,"connect":29,"send":0,"wait":84,"receive":7,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2022/01/nathan-anderson-GM5Yn5XRVqA-unsplash-scaled.jpg","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/nathan-anderson-GM5Yn5XRVqA-unsplash-scaled.jpg HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 11:45:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 367077\r\ncontent-type: image/jpeg\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":367077,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2560x1747, components 3","md5":"45b0ba20731fa39fed924274fb1afc08","sha1":"db5a02affd237605314fc17457a1a5f7c6a8184e","sha256":"3662dd14e41b8f2990a0102b5d8d7524d9e666a3dbee5cd1e9350927e9223268","sha512":"9d0ea689a5af8734ce11540a3a14522fe97118fecaa93cf611fcca2fdc6b54a04424a8f2850251e14c426920de39ace613eb55352db520a53595bd4f2516407a","ssdeep":"6144:S/dB4MsOo6ZT3ope1dQ+gsivLWvhzAFvv8zbvx8UpyqbxesfM:S/dB0OoQT3ogDQhv6vhcvS589qbUsfM","tlshash":"5074238aa8fe705dd7ad5bbb81cb7a142f17d57bc8d710060c66d71fae08dc91740464","first_seen":"2026-02-23T12:41:01.797586Z","last_seen":"2026-02-23T12:58:23.816757Z","times_seen":2,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/visarzo-core/assets/elementor/css/flaticon-style2.css?ver=6.9.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/visarzo-core/assets/elementor/css/flaticon-style2.css?ver=6.9.1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 06 May 2025 02:52:39 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 847\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3845,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3c7fe1e32a02ffd5a272c9e603f6deaf","sha1":"9e780d93d2a260eaab27a88833eafad33a4dd562","sha256":"f749d730324a6e8f71e2ceabc4f5108e96de06da29b56e3ed6a413b103b0f6ed","sha512":"e9302bf3c579b9002a44170387a18c6f3dd9b63944feaf67b6b86a2a8904dcf7e39e7266f56283ebe1e9a09cb5afeae5766fcad57e003d7323a0e4dd0a961f82","ssdeep":"","tlshash":"f581e8f5952f01c04313ef85e7abe6909f98b02d89c09c55e0665e8cebf5e1a87823dd","first_seen":"2025-12-12T05:58:10.801607Z","last_seen":"2026-03-03T12:53:11.455282Z","times_seen":4,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/jquery.fancybox.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/js/jquery.fancybox.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":154104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6e11711058a9459a94d5a19b26a78135","sha1":"76792d5913afe035b6ccbac585b0b5e70b33aa76","sha256":"7b99eee1db728472aaa8452017a0d755f488e8d647cc0f62baf45f8ff65b95ba","sha512":"6ecbe997bc6e82fa7976a98e291ec31e043de23f0f5d06834fcc809cde8d0c3ffa0e96c734dfc0b0fbc313e405eac603540913794bb3a9a86ac56db5d2ab868a","ssdeep":"1536:26iljQs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSp:2NoETcqwF3wO/VUbZZr7WP83RSD6E3t","tlshash":"f3e3968a67bd112589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-06-08T13:53:38.090382Z","times_seen":3124,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/tweenmax.min.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/js/tweenmax.min.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":115897,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32043)","md5":"7ae6465dae50c862dc55a547caa86a66","sha1":"38cb690397f9eef5a9592efc9ce9e936e4e863cb","sha256":"a863a77e9ee263a0ec9c1e792bb33ed0f663582b7369f472261df7b6040990c4","sha512":"e8c08fb3d7db488b7a993a491f62dba3d2a4ef581c83063ce410aa2463f4e31f8ed3c5b79bf3a229f32231ce1540a627f830ad010c291ae996783d1c002791b1","ssdeep":"1536:jjm/F0VPBJ7jG/D+EH/GPJBpYSiZAr0GOlygZYzw6JcIfGxlLYiGsYVVOiE:jC/Wv51/vme0lybJXkYiGu","tlshash":"3db318c5312270128497269a557f0a47333bddbab4098d2cf589c5de3e1ce8921aff7a","first_seen":"2023-03-07T12:12:24Z","last_seen":"2026-06-08T14:51:02.916435Z","times_seen":2477,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cabin/v35/u-4g0qWljRw-Pd815fNqc8T_wAFcX-c37OnuHXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/cabin/v35/u-4g0qWljRw-Pd815fNqc8T_wAFcX-c37OnuHXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aoimmigration.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 21:10:30 GMT\r\nexpires: Sat, 20 Feb 2027 21:10:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 228599\r\nlast-modified: Wed, 10 Sep 2025 16:58:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"7936da25948582586d144057d1d752ef","sha1":"b83a0fdd5eb51e24488665d2eb5dbcee892dc47d","sha256":"82314f3b37a525f4811cfafc1562711e41fc248e80b6b9a94ce7dbc758625acd","sha512":"e11b51f94c3f0e1c3e481c0bc5c27dac0bb9258ee6de16672e06d98f47065afd139e1d6d75d084811c36cca03afd151ab1e3a2dbfeba4dfc37b2f187878a14d4","ssdeep":"768:8ySedzJBWdHVYKkp5K1JcLvQk6z+2gZzvUV9/n:WYGTB05K3cLvy62zBn","tlshash":"1fd2f1e945be6c71c7ee01346428bf90af664da8ca9f775fc0092d69d3e438a130c9b4","first_seen":"2025-06-04T19:39:18.134067Z","last_seen":"2026-06-08T19:17:37.381906Z","times_seen":818,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":101,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aoimmigration.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Feb 2026 17:41:49 GMT\r\nexpires: Fri, 19 Feb 2027 17:41:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 327520\r\nlast-modified: Wed, 10 Sep 2025 16:56:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28320, version 1.0","md5":"44691444dd981153f160a086f24bb7d5","sha1":"a104b4cdabfcc943b559a3967d531e56c0955f17","sha256":"f51448b0b7f024d139fb7598d21b4e06e8174268ac93fc26cc2d4196144cb672","sha512":"6243c4d625704ebb0b5acfa2318a5efac5329ef5640e8825a8a103fb1c6c0042b3e48ff90781e78fb015abc3b9dcb417c957ef034f61949f07498fb73a40612d","ssdeep":"768:oqEBPQTG+amXUdSgtBWKwLbTNvi7T2en5o19Y+dLjah9a/Woxh:YlQTBxIXdibTNvIo19Xjuoxh","tlshash":"8cd2e12ee1bf62e4ab337d3f8ad7728cdf6f2c14088860475870ae63d4a17551196e91","first_seen":"2025-06-02T21:09:25.198343Z","last_seen":"2026-06-08T19:22:10.053244Z","times_seen":7316,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":129,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.30dc2f9c080845a413a6.bundle.min.js","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.30dc2f9c080845a413a6.bundle.min.js HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en; _ga_P3FBKEX06K=GS2.1.s1771850429$o1$g0$t1771850429$j60$l0$h0; _ga=GA1.1.1488666867.1771850429\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 05 Aug 2025 05:35:09 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3174\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8541,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8501)","md5":"2b532ba0a3212dbf2a6f7e1731dae06b","sha1":"e3bd74e5f4e8a24bbe907032bc13e4d3d80bfb39","sha256":"7862470de50d2527f7a40a07d85513d3e61d70ff4711a84695e8d2da578336b2","sha512":"6e73ce64bdadc4b477b19ad29094945225c83e430480f5183de5817965e7b911fcd1d164a5e64c583aff17406daf40c328b0383867a1f4dc7a35077fd11639b4","ssdeep":"192:fOwfFpzqxODoWV5KxZmdXLf+UvDZ5CMtakRhPZTxcMkCwB410QsFfpRHvcwxDnPo:pHzqxORV5KxodXLfpvD/NtakRhPZTxcg","tlshash":"3f02210a74c1942db58b58ba3532432c66a8014de1018f6eb1bf79fbc5a6d82377b7f1","first_seen":"2025-05-28T23:40:12.463369Z","last_seen":"2026-06-08T16:25:00.990511Z","times_seen":2522,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/css/bootstrap.css?ver=1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/css/bootstrap.css?ver=1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:46 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":197128,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (629)","md5":"64c0b89cd3f93e856c18ef61557ab931","sha1":"2cdc2542e90d03bffa9011e2604754b8b03561f3","sha256":"d6daf7f0b5b2f377a5b8f15cb8b418b6b6a618c08e8ec731b623aa549fe032b7","sha512":"00f6b639f96e83a4321929b18a8a9e517d76c0f5729cd0f953810ae6551950a96fe89467c6c6ff341b3c95e0102e2a6379bde8e6d255ae61ff8f5be12f26f365","ssdeep":"1536:BycclspGffCCU8W8z9WV64wpHeASzjN+QTzNo+uwwCrq9//zDL4iDF4j9:B5ECCU8zSwCM//zDL4iDF4h","tlshash":"1c145459fdf11408706b826c64d6b7f57b6d8087c61edeba7ae32124df493c18cb2988","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-06-08T13:53:38.048877Z","times_seen":54,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.29.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.29.1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 05 Aug 2025 05:35:09 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 188\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560)","md5":"1c594c3d9d1ca41e75dd362446271183","sha1":"924dde674c182616ab106ba369e59fc69609ca44","sha256":"c82a39288de8c6386a7ebcc8282c7d730d6d8c0519bc061101bb6866fa9dc32a","sha512":"b612fc4d6c2769bd4636e084cc713c9f8cec845f3696e8cbae1b7c411bc03888883c77f5ee2dfd5f58418d38a624b5d90d527d25fa3d5cbccb7719069fada022","ssdeep":"","tlshash":"a9f012237e4b94aa783f195b1183337c74944ec893a0a8d8e8fa91436df4cb67370622","first_seen":"2025-05-28T23:40:12.49824Z","last_seen":"2026-06-08T16:25:00.995281Z","times_seen":2062,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustocanada.com/wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1746500359","fqdn":"nexustocanada.com","domain":"nexustocanada.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1746500359 HTTP/1.1\r\nHost: nexustocanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://aoimmigration.com/wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1746500359\r\ncontent-length: 349\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":23625,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"nexustocanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1746500346","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1746500346 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 06 May 2025 02:59:06 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":104004,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"3934e910f3ac981c34e072c318255cb3","sha1":"8369aa4f907f42a86bb4e5cfa57c0e02ceebf1ef","sha256":"cb149ba5ebd178df458b46ecd469678d0643933ce5051c5a20c7fff3e2360144","sha512":"36171b3571d4d05463d12c541e4b76be4f68accc76c48c917783781b368f7d4ed971e19de63cd2d397823ff80e9bce4838a1f5c357436da15821e37a8537d723","ssdeep":"768:yaghqVBvKUEP8CnCyu1+Q67qWe5RQhoav4ALTHTo9prSJj7M9dbWRnx:BYlC3EpuLCjslO3wZCx","tlshash":"b4a3656200171541639358e223ce7e24ed0ee2457244d0b9abfc4b6fefe7d7622a936d","first_seen":"2026-02-23T12:41:01.808149Z","last_seen":"2026-03-28T09:27:24.845662Z","times_seen":4,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/visarzo-core/assets/elementor/css/fonts/Flaticon.woff2","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/visarzo-core/assets/elementor/css/fonts/Flaticon.woff2 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aoimmigration.com/wp-content/plugins/visarzo-core/assets/elementor/css/flaticon-style2.css?ver=6.9.1\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 06 May 2025 02:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13936\r\ncontent-type: font/woff2\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13936,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13936, version 1.0","md5":"099f1f7b4d07f2eb676fd920a7543e8f","sha1":"78f751f68d4bf3244491db255d30454fe04bfa7d","sha256":"49462f648cc0c8c6126e2c015d86f7305350156e9ef1cecaf0b7682fffdd712c","sha512":"d392afe4a31c0a0189b3e54eab596ffa59ea34a7d63bd8ec88ffc15698bbb59600df4f3ac3697a4e648969fa36c33657b9c1ebea1cd73256db5d4101fe48c0c1","ssdeep":"192:jx3ilWiKpXVPbCw2iIg6CVWY+GEXBgC+Q3k5BSMvd51oKw0Qow0CbjyretpEpH:jwlIZ2iJVWY8T059XGowCgEpH","tlshash":"cb52c03453621b549b34f6a9a2c11c491d48467c8b3df5c43d0a8ffb30bfa892a3b8d4","first_seen":"2023-05-09T14:09:33Z","last_seen":"2026-05-31T04:01:00.565411Z","times_seen":24,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2022/01/jacek-dylag-PMxT0XtQ-A-unsplash-scaled.jpg","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/jacek-dylag-PMxT0XtQ-A-unsplash-scaled.jpg HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en; _ga_P3FBKEX06K=GS2.1.s1771850429$o1$g0$t1771850429$j60$l0$h0; _ga=GA1.1.1488666867.1771850429\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 11:45:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1042684\r\ncontent-type: image/jpeg\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1042684,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2560x1704, components 3","md5":"349a50ec86109930f636b80817f092e0","sha1":"c59b599b4c278bb4ff12fa3a1ef0722f913607b6","sha256":"95f531b3853b54fe9f09b39dba8a72ad5209487bf6f5a8159f94d3eb5cbdcec8","sha512":"e09ae7c7eb42dc352e3830f4054b8f5bfc687815b0f65074e8a5cd6b2088ca3f906a13e4f8e4f8670f77ebcd34b22cc0cfbc7acc04ae90b786c0b2986fd48006","ssdeep":"12288:yiJ17aUPa5nL0FvczuMFxDgPmNYh6JyduK1dEtB0TT/DTAyobzISqBICXPrfMMuc:yiJBBKzu0xkUyTnTATIgCXPrxnJQP+bX","tlshash":"41253308ab90513afff9266605981b9ba7621432f5b259360ffb20e4de09f5805fc39d","first_seen":"2026-02-23T12:41:01.811691Z","last_seen":"2026-02-23T12:58:23.818463Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/css/nice-select.css?ver=1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/css/nice-select.css?ver=1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:46 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1268\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4007,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a7ace323b9fc8a831a6e64feb23fa0b9","sha1":"9317ad29306bc72eb3fa92981be8141fcd394e7c","sha256":"c13280e79f74109c5e3854822c0f0c972d0a57245c95b0b3762f9788bd918f8d","sha512":"b87b828a0726bf70724ea050404c278175a4ec4fcd68f60ff821609699173e74506d2b9b26610436087e8ad44361b595d1f519994cfb7c3ffe24375e4050f9f8","ssdeep":"","tlshash":"2781e2779b530141642a876fafd62b582339c003b826cdacbbdd960b8f0d5dc94e6747","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-06-08T14:58:01.748279Z","times_seen":3658,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.29.1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.29.1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 05 Aug 2025 05:35:09 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":48393,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48352)","md5":"a38afa0832e8ad1c051be0e0abc9c947","sha1":"81e90ad3b972589bcceb3547f37e13d8dd9b9216","sha256":"7a10091e9a23720cd57eb7c02c8c0b8e826f6a73101370a432e9cbb63ca77e72","sha512":"6af026805339667fcc4cb62c2843f4f97157c66cdbc395c3ae246933c855ad6b35b0180a05d6a958e89342e6c90daa6034d0e45889084c617b82576946a1c602","ssdeep":"768:QeAjA6wk9C+QioJHYNQAzeLHeBHmjkSK7+z1hlN14cR8+AvNKRiA8m6XS3gzlAIT:QeAjA6f9C+QiSYNQAzeLHeBHmjkOzRNM","tlshash":"ef23c7853652f4f70beb40daa02f450af25619a8640df4d4bfe9dce19470e8e237ab74","first_seen":"2025-05-28T23:40:12.478208Z","last_seen":"2026-06-08T16:25:00.982812Z","times_seen":2434,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/plugins/visarzo-core//assets/elementor/js/training.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/plugins/visarzo-core//assets/elementor/js/training.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 06 May 2025 02:52:39 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 687\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"adaa31b8d84f8a8974b13df12768dbdd","sha1":"00a5de57315e9c8d96e414fb713f76116f23ac80","sha256":"61f084713c97fe28c874c98a958e9ae93137dc26e5238042e814e8296c2087b9","sha512":"14626c033d9900b98b1d8af3acc87d99e1359501941f1b05608557b885d4b0b149d6821da8a2c4a529c3ec2e5d4c25ad6ed1b944f7c211f41bad458e04335459","ssdeep":"","tlshash":"5251292630aa6114607bbd675a97752cc6e6421f814138a3bffc12600fb6e1a32edf5c","first_seen":"2025-08-04T02:23:17.004026Z","last_seen":"2026-03-28T09:27:24.865156Z","times_seen":7,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/images/icons/preloader.png","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/images/icons/preloader.png HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aoimmigration.com/wp-content/themes/visarzo/style.css?ver=1771850427\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20615\r\ncontent-type: image/png\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20615,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8d4c398974d2ec171c0f3d07e6c13335","sha1":"c713b2149d1e1e06369461db9a1e9f1ecce7c540","sha256":"1fd91546cb2cb0390b3f9697bd18bbc5d23fc20b5c9de958fa3f7f9801aeb4db","sha512":"cb864d910bee6e5ebba1c2cbacc2e0f8afcb9f5135c4f36bea0476e7c8fc665e2ce69dd67dc603d6681b141a727d57dda78993e9d121d43550992ef7abc29167","ssdeep":"384:cpzGPZ9Ckd1kVgPemxWv9VZ0U+gTiaDg9vH/XF213M5SLWIl4LeX8nDe:cpzOj070UNmpvH/Vw3My4BDe","tlshash":"e892d0b6f751e8e4da1a0f393d662d4398fb82790419e1feccb32c1121456cc9eda74a","first_seen":"2023-10-31T10:18:07Z","last_seen":"2026-03-28T09:27:24.808744Z","times_seen":7,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aoimmigration.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 00:01:26 GMT\r\nexpires: Thu, 18 Feb 2027 00:01:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 477543\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-08T19:39:48.069933Z","times_seen":281392,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/css/font-awesome-all.css?ver=1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/css/font-awesome-all.css?ver=1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:46 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 11439\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":63102,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (302)","md5":"42cb29f7a1beae5f87194ab0619d9f24","sha1":"fa93615b7c15ebdfa1148f7ec633443819ad8517","sha256":"fcefa444c005220534f4100d9660142cc0b4fdbe9e7839bb005b64de87bc0e83","sha512":"7aeec68a6949cd9985df3bac56618c0b2bcef6d19f67faf9f472d5db0f1db9c2bf87d886b305c14708b84919e86fc9063bf04bc8dfe98171c772a5135bdd16e8","ssdeep":"768:MoUii/ukQKZaAvlAk86JsTODNnYw0/30K0lya2jCs:Mdii/lZ7lAk8IsaDNnYwSN0lUb","tlshash":"d353fdfee1ff10944311e0812743e3e0b729b66cac8a4c98d2a67d9df1d165ca186bdd","first_seen":"2023-04-10T14:50:45Z","last_seen":"2026-06-06T09:46:34.311807Z","times_seen":125,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/css/flaticon.css?ver=1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/css/flaticon.css?ver=1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:47 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 837\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3775,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5deddf42d74eba0c8823361f32f43f0c","sha1":"4f7c6a86d3fd6ee46e4e8a96357f967d87b06a00","sha256":"80a907dbaf00016ee938e7d5fb815e5473fcdae36c12e9c3f34dd783ca04468f","sha512":"1e58837e740b444cb59bc01b6dd3e06d04c77059d50e9152cd91f241d0323a1caf7750ca74f1dd909a07b958eb770739087d9ae770ab8acc166238bb2e19f25f","ssdeep":"","tlshash":"a77140b6c13f10804311ee8523ab62409f84f02d99e8bc79e0566e9dfaf5e1987823dc","first_seen":"2023-08-24T22:45:33Z","last_seen":"2026-03-28T09:27:24.84268Z","times_seen":16,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/css/color/theme-color.css?ver=1","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/css/color/theme-color.css?ver=1 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:58 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1680\r\ncontent-type: text/css\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7788,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b4718e31434b1d1477a19dc7a16e2cac","sha1":"3c051697cbfc05162c64c6a70aac5ae4e84acb61","sha256":"4232caa60c423dd56bf9323d063b5f7b0435a035d19412e65105c03cbce74ad3","sha512":"e7b1cb5780cbc87b774004fa773ad96b0ea49234613848c8de0aaed7ca8db3b400dadd370c44ea170a27d8ee048562876726d765c7eee443d0d076fe1423aa2e","ssdeep":"96:ABe9Qe4TL4MLI/X6pesp4L32LLcpyApZJQzmXzHs:pm+ZJ+","tlshash":"f9f1c091a3fe1e196157b65d608ffa6c734c52f4d18a03acf27a5004729c21c7e7af8a","first_seen":"2026-02-23T12:41:01.820448Z","last_seen":"2026-03-28T09:27:24.90764Z","times_seen":4,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2020/08/news-resize-3-360x300.jpg","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/news-resize-3-360x300.jpg HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 11:46:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16831\r\ncontent-type: image/jpeg\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16831,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 360x300, components 3","md5":"7c292573d4b2549b047f28d0cfd84e39","sha1":"f08dc50428067b94161716d909c0f18fea5707fe","sha256":"6ca3a3bc0804f130efc3fe7c5da99d527184d096a1a49e9620d589532887cc4d","sha512":"2cdee32054bb0009143ac937f038447b01f30d93abf2b970147f40302c4a2e2be1dc77ee3f92addbc88ddd435167c3ee36badacc4828a1df9d0c841b8f682f3b","ssdeep":"384:azFzHjSfZf+asfU/OGNBgixA+s1fQCIHo+4mHVoUedN:a0ZmtfU/dIEs14CQo0HVAb","tlshash":"0572c08fd62aed918c143de07c5b1a3e1c6f434afa9596e0f221d552cc8c9cda91b583","first_seen":"2026-02-23T12:41:01.822633Z","last_seen":"2026-02-23T12:58:23.771762Z","times_seen":2,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/bootstrap.min.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/js/bootstrap.min.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":59968,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (59729)","md5":"4cfcd9ef665ac4f7b0a0164943fafc41","sha1":"8bf0a31c56a8f04247d966cb121643e05f48f7d0","sha256":"03ace13cf97c2b8a48d4f158222cce6c201ba7c88615c489043ca8c2acc8fdc1","sha512":"ad2bb3b81066865bddc1da6a0f76bdfe1972e68bc762815053c4e877f3e9f3d484a11c0f02ec7d2ec0ae5d6a3bdf25bc4b8497b988eda1e77467608cbbd95134","ssdeep":"768:uoYGDyGi43HVzdR2BmDb7zTNilqtvY1xWiDLYjQVW1/MVOlKvnxFa+B09:uoFXOCx0wNGaYk9","tlshash":"4143c80a72547873059fa176817f420bb736798ae90a826cb91d98dd1e7cc893237f7c","first_seen":"2023-03-07T14:47:08Z","last_seen":"2026-06-08T13:53:38.076029Z","times_seen":381,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/themes/visarzo/assets/js/appear.js?ver=1771850427","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/themes/visarzo/assets/js/appear.js?ver=1771850427 HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 13:35:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1444\r\ncontent-type: application/javascript\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4228,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"cbbd68c06c9cdb2481b7050f6e64375e","sha1":"1ee3d2e29b6279f1986cd878072780d596250878","sha256":"4aded4f99d9aa82ccf099bfc6ddb735e25a6de44a124791c1e258cd05daee11c","sha512":"4de42f78a6ab93d9dce738e73c7dd889e7ffeea3dc01f8e09055b6eab195d1a759fbc502ecadeeeead6ec9be7fdcdededd440e154ee7e9742d77ff1a2fd48fac","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyu:X3/skfRwbDOrdfFjg/2cmVflyu","tlshash":"48910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","first_seen":"2023-03-07T12:11:58Z","last_seen":"2026-06-08T02:31:56.63605Z","times_seen":4917,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-P3FBKEX06K\u0026cx=c\u0026gtm=4e62j0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:28.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-P3FBKEX06K\u0026cx=c\u0026gtm=4e62j0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 23 Feb 2026 12:40:28 GMT\r\nexpires: Mon, 23 Feb 2026 12:40:28 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 150923\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":454953,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"aba5e197bcad761f36d73fedd978efd7","sha1":"05d2082351a76b0fcdd0e87b63b498a8ecf3a79b","sha256":"bc87234320ec0eb51b1c08447652965c6af114311ecee1a502ec8671aaede4e1","sha512":"a1460839b6cbaefa3b83b6aa7e17e3b168404d59b53bf35987e7f1daa93c73a6eb45318654b24e493dcc07f684d4e2f0db54c9c815b8a66176ea489884f5b5db","ssdeep":"6144:8LmO7CW6y273J5NYygLIR8Nyk7pNH08pddlmOrELkS5fenMcm0v:WuW6y27dDEIR855VrEff3E","tlshash":"fca41ace73d670269396f078503f018ba57b29a2b45dc89af189cce42d74a5a4237f7c","first_seen":"2026-02-23T12:41:01.826569Z","last_seen":"2026-02-23T12:58:23.805403Z","times_seen":2,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aoimmigration.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 00:01:26 GMT\r\nexpires: Thu, 18 Feb 2027 00:01:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 477543\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-08T19:39:48.069933Z","times_seen":281392,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":190,"dns":0,"connect":28,"send":0,"wait":59,"receive":6,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aoimmigration.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Feb 2026 17:41:49 GMT\r\nexpires: Fri, 19 Feb 2027 17:41:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 327520\r\nlast-modified: Wed, 10 Sep 2025 16:56:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28320, version 1.0","md5":"44691444dd981153f160a086f24bb7d5","sha1":"a104b4cdabfcc943b559a3967d531e56c0955f17","sha256":"f51448b0b7f024d139fb7598d21b4e06e8174268ac93fc26cc2d4196144cb672","sha512":"6243c4d625704ebb0b5acfa2318a5efac5329ef5640e8825a8a103fb1c6c0042b3e48ff90781e78fb015abc3b9dcb417c957ef034f61949f07498fb73a40612d","ssdeep":"768:oqEBPQTG+amXUdSgtBWKwLbTNvi7T2en5o19Y+dLjah9a/Woxh:YlQTBxIXdibTNvIo19Xjuoxh","tlshash":"8cd2e12ee1bf62e4ab337d3f8ad7728cdf6f2c14088860475870ae63d4a17551196e91","first_seen":"2025-06-02T21:09:25.198343Z","last_seen":"2026-06-08T19:22:10.053244Z","times_seen":7316,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":185,"dns":0,"connect":29,"send":0,"wait":57,"receive":3,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aoimmigration.com/wp-content/uploads/2022/01/ryan-hoffman-ijhzqAm3N1Y-unsplash-scaled.jpg","fqdn":"aoimmigration.com","domain":"aoimmigration.com","tld":"com"},"ip":{"addr":"192.185.37.234","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://aoimmigration.com/","date":"2026-02-23T12:40:29.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aoimmigration.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 03:05:48 GMT","end":"Tue, 07 Apr 2026 03:05:47 GMT"},"fingerprint":{"sha1":"59:63:A1:6E:F9:B4:F9:61:81:78:C4:FE:75:D8:E4:95:71:34:C7:39","sha256":"63:E1:DA:B4:2E:1C:8A:FD:75:5B:90:98:BB:A4:7E:F4:54:6B:C1:53:F1:61:04:ED:D3:36:4D:78:88:90:71:34"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/ryan-hoffman-ijhzqAm3N1Y-unsplash-scaled.jpg HTTP/1.1\r\nHost: aoimmigration.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aoimmigration.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 27 Aug 2023 11:45:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 323524\r\ncontent-type: image/jpeg\r\ndate: Mon, 23 Feb 2026 12:40:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":323524,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1707x2560, components 3","md5":"2860e3ef8e79dac7ecedc78b92d264ab","sha1":"1d56c2974612b9625226caace4aa730d2d266265","sha256":"420b81c074b5d406e5318bb257af33b4ef01587a42a8c6c399241c9839bdddae","sha512":"b2dd5ee2e32ec7e80b920016b10860d27826e6888ae5a7970d49ea21870d0356e6dfd7cc7a5938faeaf8eea175f6c4d31d15209330f27b00f1edd359bf43d077","ssdeep":"6144:11dT69+71CEgTIanad6YGQp5AD24QkjmX3daeNe2Gsqq/xV8Wd+fUAEOpsQ:vde97IKa0OAi4onbNlSOF+M3Q","tlshash":"4464129d85c903a3c85c0c3d1901a8dce09be618d59eb8ed5d23c8a9cddb9ad78c7d6c","first_seen":"2026-02-23T12:41:01.828317Z","last_seen":"2026-02-23T12:58:23.776306Z","times_seen":2,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"aoimmigration.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}