{"report_id":"5d2005d6-43b2-4357-99fb-615930765cfa","version":0,"status":"done","tags":[],"date":"2026-09-25T13:56:42Z","url":{"schema":"http","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"104.21.58.154","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"title":"Canva Thailand","dom":{"size":294676,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (58325)","md5":"1ea2ac21cbfe64ae3dda335a23a47306","sha1":"9255f9325bbe624d971db997bba392e74c442814","sha256":"ae37664de6f6b35b7ca8e1063c57845d493cfb10aea7439ab50e7b71cb4f1353","sha512":"a45ebac12f30ee8e59ddce7d157a3ebeb2c53229b7fd656e6a7a54e53f9bf33c8564525209e75bdeb6c2e2c1786467fc5da026921f86198c17bc04281f44e818","ssdeep":"3072:4FjhV6oiu5GMANAwfAP3tfEPP2Qb85Am4I0RRKfAz5v:4hXYmXP3tfEPP27Sj5","tlshash":"c154b77252f0163231aba3a87a65770e3f54e913da1f52c576ed46c84fc9f82c823a1d","dom_hash":"domhash57680d6d1f6517f273489450ac596986","first_seen":"2026-09-25T13:57:02.818526Z","last_seen":"2026-09-25T13:57:02.818526Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"104.21.58.154","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T13:56:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"canvathai.net","ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-10T16:17:21.753296Z","last_seen":"2026-07-10T16:17:21.753296Z","alert_count":320,"request_count":80,"received_data":3183331,"sent_data":46835,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WooCommerce:11.0.1","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":1,"received_data":49345,"sent_data":572,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-20T23:08:06.309324Z","alert_count":0,"request_count":2,"received_data":261119,"sent_data":1135,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":5738,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"canvathai.net/wp-content/themes/astra/assets/js/minified/mobile-cart.min.js?ver=4.13.6","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b618e52e39937ce36fc0a1102f62242b","sha1":"468cce9b1889d2d2928258c3d8eacbd652bda3e7","sha256":"cd5f359a0c131bb6fd3aad8ba2b218df00316a3cde57ede69052dcac3ce97ad0","sha512":"35a427c9321c1fab8c25ba3de256d3fadedbe7b2d59d4804ad1f612963ac0409647b05de6b5d15e760599796c73a275ee86bc413ee4ee1dcf8698285b56cb694","ssdeep":"96:yKPuoNf2p0XCp82kQUzyDaIyk3z6gac6/R6h26qkX6xDRGvRfTS3c2oMu6wQQTKB:yc/XoPvUzyuIyA6/z6as6DE7S3ju6d2m","tlshash":"aac133646230b87108fb5657b6b7ebc4393268df641a0051282d9c9d2bbdfc251a1eef","size":5654,"data":"","first_seen":"2026-07-02T00:51:19.012204Z","last_seen":"2026-09-25T14:00:06.804706Z","times_seen":283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-25T16:28:34.022473Z","times_seen":977395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"98c6a40496f8300d3f5af9f3629e6760","sha1":"85b0a3986461b3dd804a213cce85af0f1f28dbb2","sha256":"77047b429d1eda963658cea5bb2bcfa9a1781acaf4c0c20a6f8a5197aa07785e","sha512":"af609f46684a7b725869aeb5bf1b56ca0b217a85e46deae083e50f3bf7cdc94ca28ab1c1ee382b3cc1b665c00c09d7eee04f7acdde5cc80d6bbe045b7ea17cc6","ssdeep":"","tlshash":"b9d0a79605992d8352dcaef00000283234b0e217f6a108002b1cee6c3239dc3de10147","size":213,"data":"","first_seen":"2025-12-04T03:18:02.14796Z","last_seen":"2026-09-25T15:55:19.241797Z","times_seen":11753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfae1e8e774dfef11731812874e3cfc8","sha1":"1cdbd9c79f76a5aece257d2807c0f4cb9e4d52b8","sha256":"67b82abae5252e7f4fe9d20924652482ece99df3ca91ed6aa1c98a53c1f98f1d","sha512":"601334ac697853d4abf3e1e5c5706fa01c9da513b0fd045e2eee0e8b50a75f5e5ab67fd170fb54703f5a79417d8703f8b0d186801e69249a6784d923a1401e5d","ssdeep":"","tlshash":"a8c08c3f1500677824e31ee8a8f7ab903f232fa3d29e0080d8bc86569390d8b9c21dd1","size":172,"data":"","first_seen":"2026-06-03T00:16:41.164862Z","last_seen":"2026-09-25T14:00:06.810485Z","times_seen":3953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"078bb3c1697f4c2cc4849ae5b9bf58be","sha1":"45be0006b1f62bb08f1ad2e37afb9c469f853f46","sha256":"0ef0a513bc319b2598c5387d5cbc34314882ff2e1d26d0948bc5e1450ef6b840","sha512":"8cc17b58e65d36b368eb072417659a3b7c6903cbb3fd076b64008ce5f8d6fb7a2c56ad826126aba04a4510e876a15a9d511ea2d4f99e6438639110d5e2ddd4e8","ssdeep":"96:zeksfK5CasmvzJaLp4noB4t71ccvT2Tx6xKjxeeyTeuz:DsfK5CaPvzb24iGxKjxeFeuz","tlshash":"8291ef3816f220318173967fabcfe68973e610477105ca853d9c828d1fd496586f9bed","size":4452,"data":"","first_seen":"2026-09-25T13:57:02.893739Z","last_seen":"2026-09-25T14:00:06.811199Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d54a821c4848222c68e8098be777a970","sha1":"2cc724331743c835bcd2f0c1c2490b508ce8ee24","sha256":"f8d2649eb2889b67c9d2681d4ab8257dd697dc11c1421673b32d088cafe81dd2","sha512":"3c6d0af6078448b5a865d106bebf2abd496c05b5707733f10b0eb29127f0db9f37162bd076bbfeff74595898edba5264b0b53d149986df679ef1899a52b49a96","ssdeep":"","tlshash":"6dc04c6b774c19e5124739d01f9f62d53839918876517c118caca905d49089a6d06f9c","size":147,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-09-25T15:46:16.871755Z","times_seen":28083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06f019a6ff09db6b297570940eec1d5d","sha1":"872efe186950ce534aad341e7030fe24f7c672dc","sha256":"53f829ae556bf7011727483015d83a98bcdb4b5796eecb728827c1282c971536","sha512":"0cc41e9797501e654a2b51a1adba4d3593347ada90e0dbdeea3ee89345415ab192007ae9886855447d472d814b8945fcb680ae7fb8942d17af1682a33236d633","ssdeep":"","tlshash":"5be07dfafd5b457101e7a1237bce739e293275a3e92a4c402889ce806c38dd31126dd1","size":325,"data":"","first_seen":"2023-03-07T01:19:13Z","last_seen":"2026-09-25T15:50:12.704591Z","times_seen":23270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1865563ddc7858ad8f5df54bf0d4f3a1","sha1":"8a1083151ffc79be34dfadffdf09ed386708adaa","sha256":"ed40e7c01da10e3ce3b9b6781f996cc5cbe8886a730390f8d973e361815eca8e","sha512":"e847c80bd60b06853be9b227fba7dc9aaecaf1bb86c30d7acfa880ac53a6147ba9edec4cc115fafdeb6008a33e7e4a4164e13d763f8e7509d33980aac7638837","ssdeep":"","tlshash":"60d0a91002d22e0176db8ca290218fa8b0fd92a0d1d4f08daa7c464862e6a1a1a68209","size":220,"data":"","first_seen":"2025-12-06T06:58:10.775603Z","last_seen":"2026-09-25T16:11:00.329703Z","times_seen":3723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d51e9341d716528def456d78895580c","sha1":"e61c62f3d2e9540686f073046428fb5bc5fe6d6d","sha256":"9525411212571fb6c5f3571df902190ec355ba8c31ee2ae6b4f9e52e74df4775","sha512":"84b733fbb7cfd2f9fe1dda95bcd51d3946584727b6190fbabe8adc08b9b7aa0ac0b66ab267bfbf4c7b1f4a98b049718ba6559f6965cf1f8cd6cb1f4f31554559","ssdeep":"","tlshash":"85e026ee93ba8d4b5285bee8d07778ed706089d2d564e45a4ff86c4e8310982c90000f","size":334,"data":"","first_seen":"2026-07-10T16:17:27.512761Z","last_seen":"2026-09-25T14:00:06.814163Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"68770eb1c434fe835854ec100871a867","sha1":"6bd3a471948e812ff5b8f5195e51992bb82d40c5","sha256":"e8ea904fe9388a0f548cf81954d2fc3f9c404b693b3f514f5bc27cc757edc401","sha512":"d256f6740c4493cde63baf95762fe4ab34f9b3fff7a58fda2377155c42a2969eb02e3cf7e37bc7e99e9af0dfa452f2c65d5d4086cc60a1531afacea36e10b441","ssdeep":"","tlshash":"18b02445cfc05d3303d1fc00403100f4c154cc045145740447754000437714c03fcd0f","size":120,"data":"","first_seen":"2025-12-26T16:23:11.6677Z","last_seen":"2026-09-25T14:00:06.81509Z","times_seen":337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca7eca4cdfdc625651fc472d782e8276","sha1":"393d945c58f39ecf1728f3eb871e5cd03fcd16e5","sha256":"5f07b2d39a839a1ecaeeadb5086557ff5f74f80cb9f5c362f29a0568b2300eda","sha512":"089c2b0dcb7c09dc30366be1475d8b8d809a96fd5f53e2fb2465423d0eb0808db298c5f55dd66cf5db3055a09f1971d6e362f41de2ebaf7c869928e4ddc847dc","ssdeep":"","tlshash":"f1017112ae04a935f7d2801150a85bfc32bb13bab4c0402de3ad4b6dd22cb81e0c2a0e","size":730,"data":"","first_seen":"2026-07-10T16:17:27.514026Z","last_seen":"2026-09-25T14:00:06.815756Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b472e6f7ff877f8196d7b0a7db110713","sha1":"612f3b552fea41514415926c2d8b687b0bfbce58","sha256":"208a2974b7a12b68ccf39d3d773f65d06234afb4728b98e67a1bc0a524761a54","sha512":"818f922b5fe952f3b0a75e0ca96c3f490896452d65776ce2c097bc23b7988ac50856ad843b58e2d43394e6c8496d514e80a90b535b6ec2bd74de18fb267ba9d2","ssdeep":"","tlshash":"53e0c24305edeee769ee1c8a3321aab771a06562f1a8095121466c781360e92cb61d6f","size":304,"data":"","first_seen":"2026-07-10T16:17:27.514955Z","last_seen":"2026-09-25T14:00:06.81661Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.6","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5803d1e6c10a93561d597d9cfb8477c","sha1":"e266c7046d41dc35d0f3eaf5b6e1020cf8dbaefc","sha256":"83eda8e5540512ca57e2216df1c90dd4bb2cb49f3f58188345de9582855648e0","sha512":"496675fe192e9de999bf7140e2e37d2a569bd509e0d22a54b123a5821d45eb1b578d436a7fd3fde6fb7a5ddb2beae9be5c3e4a63d2cb99441ecc125fe314ee95","ssdeep":"768:MtPx6KoYcFDTHjGropoCoRoXCjZRcjC1LlJtmxTwB2V7sEuUU2tfSrgt8zQmIFhx:4Px6ViOCjZRcjulLmxTwg/ZSnWhdcFIz","tlshash":"43b271a667002a3604fe17e7f5daabc17671149ffa0944115838cc2e29a8fc361f1af9","size":25719,"data":"","first_seen":"2026-06-02T18:26:47.183631Z","last_seen":"2026-09-25T14:00:06.748647Z","times_seen":3906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wc-add-to-cart-js-extra","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"42d306b1165f5cd7097f04b57cda9fd2","sha1":"eb5713bf31db3e6c620f2c1152d8ff35ca7dd31f","sha256":"de090ac30d12d4639c1e3bda2d4f8d86ac94b519b69b743748825136f4a3e5a2","sha512":"85c1751d4633fb218c1f785a9c79ff9dd9901462cd426bac0959d4de6dc9d2ebe2c13b0db3bae421f83f23e59edacc99ee17fdcce396e9d600ba05e476d74b2e","ssdeep":"12:0s7CctrTUTcNBVC66M5WUQVCl5WpzgKMBHz5/Rj:bJThBf6TUQVClUnMxzhp","tlshash":"18a126eed3ba8d4b5285bef8d07778ed70a089d2d564e45a4ffc6c4e8310982c90000f","size":4775,"data":"","first_seen":"2026-09-25T13:57:02.899672Z","last_seen":"2026-09-25T14:00:06.819232Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a816ff38bdd095e2118365ad4c618b","sha1":"c58ae69eeea5bf2846b88a6c7cbaaa7728a2444d","sha256":"0eb862a5891526d089b727fdfa30222cca4b4d75b5835727bf57df17436256f6","sha512":"b6650185967270b09fed48ef9937d21ae45b37010aef6b6a6a4ce3efb295bd39d3734b1cce7535e126cb255b1a3b40c27dd97322f1b70ee0e1c67163e2539cf4","ssdeep":"","tlshash":"41418335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","size":2439,"data":"","first_seen":"2026-02-05T17:32:11.552459Z","last_seen":"2026-09-25T15:39:23.020785Z","times_seen":48497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/astra-theme-js-js-extra","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25cf7a12f1a82f47719ed630533d537f","sha1":"e99c2d8192e8392b2a7136a0a04fce6876c2b224","sha256":"064d85ca85c66a966bcdd50e959ed7f69c1ef7f3b21ee18a6de07f16f674ac30","sha512":"fe882c852c0abcd2427e62a6c6b5831a48b53971a0c3a1236b873b8cb583924f719f41b9efdf1f25e81b92c7507cbfd6eac38f35211a05a53f2741e08f6a111e","ssdeep":"6:1VTHh3DvMR9vMRKtGVIB+zKo8JP/r6iJn9q:1FB3D6484aV/rNJnU","tlshash":"c4a1a710c2d21d0176d78c7250118f64b0fd9190d1d4f08d9a7c454862e6a1a1668109","size":4656,"data":"","first_seen":"2026-09-25T13:57:02.900569Z","last_seen":"2026-09-25T14:00:06.818364Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wc-order-attribution-js-extra","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d12f762be9f3fc4683b91abc5820b5d","sha1":"df1c620758ebb4c094215a6096408c7809910bdf","sha256":"c203bff49ddd0b1ffaf964d744a0f1028e72da84d942f5e5cd63e69685e8c443","sha512":"d647ef0012978ef0445b14b3dbbc3ac7f37775b497c50a92513831ed9ec212ffa2bd12db45dff31562ea4f427885b017b4b63d22d8d91f1b423f8c450b3271c9","ssdeep":"12:5aE85LUxHPrTVmAxMCO0mFSMKuNmP3chmIdTKFwp8gS0X4erMP2YumO:bxTTVwC8F+kXnpBSQMemO","tlshash":"c4b14212ee04a935e7d2803150a85bfd32b713baf4c0401dd3ad4b5d922cb81e082a0a","size":5183,"data":"","first_seen":"2026-09-25T13:57:02.901481Z","last_seen":"2026-09-25T14:00:06.820111Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wc-cart-fragments-js-extra","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab839b3574b133727f83448e4c0db7d0","sha1":"7000b6aace910b3d144c364c1b28fb09782aea07","sha256":"cd71aa54407e2d9474ccacf060001eea7de8ecbd318a099fc3d8032ee82b9518","sha512":"7e33ec0608bfc46659cac7d464ad3230c572a11441b3cd42372534a0f116abde035ee1e33d096f5cd7c43603c95beaa5a8b21952bcbd7307a2382ab315c1cf18","ssdeep":"12:HcLK6s7CctrTUTcNDm1B5D9UCe6Lm53QpLNMG:HXRJThO5RaV53QpKG","tlshash":"dea17d43c1edeed759ed1cba331099b731a01112f0a8090111056c780350e41c711c5f","size":4762,"data":"","first_seen":"2026-09-25T13:57:02.90241Z","last_seen":"2026-09-25T14:00:06.820983Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-includes/js/wp-emoji-loader.min.js","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7682b381155a5d39d1cb1386daee36a","sha1":"b2863a12394b292f129f35a54f494e343d09a1e1","sha256":"a44364006b8aa2abff5fca3f4530a38379062a8293be0fc85423da9e4f36bd3c","sha512":"da295b87f0868579a996c745cbdff69613bb6f29f493f46af44a9fea85fee2e452243f1de87587e994a7404ceeb90bcea5a5a0d8a977378d6ce74c5ac337406a","ssdeep":"96:orsjXHtHRANNTDmgMjE0+eWjQPHgRhRU4omJD:cs7NAME0+eWjQvJBw","tlshash":"03f19559eb7938db33fa01f3653a4d4beb614436e684d038c9ae631424b1893c375a1a","size":7517,"data":"","first_seen":"2026-09-25T13:57:02.903417Z","last_seen":"2026-09-25T14:00:06.821792Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","size":1720,"data":"","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-09-25T16:33:52.451588Z","times_seen":160151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5705b9052821b74c1909a723583893e","sha1":"b908b327c44c8813020f7df9260b00513df4584e","sha256":"17daa5f5929c3deab38ffaacd89b213810e35e7d3ee115fc890b6bfdc230a9ad","sha512":"426dec929e44ecb6979356abcf8a55ac423fcc06bc47b5e4eb824640542b8c3f07a6e5c2aace46a6cf650dc7672e22545c85c3885e2665f0af6c402d25e737b8","ssdeep":"48:0ncEupIicboNb9j5okOBRQJ8H6xJsnDpr6r75eGSqlw4Sd+uOujoKsPPF3cLR8pL:0cEQxc4xN6a8EJWrO75ekw4klctsd85","tlshash":"bd91782774216d7322fb75ba2c9ee98414331639a8414501b509cf6c3b7e8ca7637f2e","size":4270,"data":"","first_seen":"2026-05-26T08:48:57.166241Z","last_seen":"2026-09-25T15:55:19.224042Z","times_seen":15332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6843fa9b6dfd1cae807f2c375830d09","sha1":"cc378797cb063f3981907698a6cc01e539eca654","sha256":"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070","sha512":"c9eb3dd5c84945d185f5ccccd954ef9546488e4979f9b3af5de54e107b2d0f8959e6c54509eee41f5ab67eb28488476e9a7751cd1a3fe671b618316cf944f3f0","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VP:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VP","tlshash":"119173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","size":4350,"data":"","first_seen":"2025-11-27T20:47:57.43318Z","last_seen":"2026-09-25T15:39:23.106556Z","times_seen":54482,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/astra-mobile-cart-js-extra","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8557d707e6aef74d255399c135d2f1a1","sha1":"d469491b0b98c50b7603687e72089b5fe8afd152","sha256":"5ca244f0fbfc2a3f6fdb1f6e6404a7bddaee55150822c5df0ff1370a3cb49d9b","sha512":"a551323dfd9168987e1a307197bd7bef3375925822173c9542db21e34b903e3105d63afb099607625343c3ad6b13484c42f931281ed5bcb33e3a744366ee7c2d","ssdeep":"3:HL6EWjTX+WORO6JEUhvCfpkLWMMk6TGoqhDRiqKG+g:wTOJ0iE+CRJzKo8NiqJ","tlshash":"d8912b45ca80593343d1ec30402500a4c1948c04d185b4044679800042b614802bc90e","size":4566,"data":"","first_seen":"2026-09-25T13:57:02.904225Z","last_seen":"2026-09-25T14:00:06.817457Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-25T16:28:34.021752Z","times_seen":1069442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef56117d1bb5cc41aa6bd127a49c7640","sha1":"b9c2ed774177fc0fceba5cb58113024b23fe4fb7","sha256":"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620","sha512":"0ec9039dbb47470815ad8bf58fd206672717a146b3a99bcb12444687e8489698e06664e6c6cc38a5d2954fa919e5a6c3bc57e44f3be2655f92b801bac43ec763","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMP:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovp","tlshash":"9f12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","size":9636,"data":"","first_seen":"2023-08-09T05:33:46Z","last_seen":"2026-09-25T16:33:52.495013Z","times_seen":181334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/woocommerce-js-extra","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"312a439b7f52099af3a85eb4bdd70a22","sha1":"efdc043edf09ee171aa122ba57126674c139fbdc","sha256":"8d2e7ce54ab5c91d67e4381b23abd958cc4a5e6fa3ddf3d5d7e09cdb7f7a553a","sha512":"dbd284c8cf6c4466d2de17b121af53f040255c0117c569c4460a62302af460844d89f12b6deab83e453151a3b574812ca7c84b1c353bee1787efdb7f439c7ed1","ssdeep":"","tlshash":"9fe0a796c5992d8392dceef00404283334f0e217f6e108002b1cee6c3239dc3de10147","size":393,"data":"","first_seen":"2025-12-16T21:48:54.504137Z","last_seen":"2026-09-25T14:00:06.809178Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae52867db002b2f95a21b85b3b518a04","sha1":"4b1615786f2e5240bec4229c7dc5c6f865c92ebe","sha256":"592acc60b8eea94fc366110175d8406604a609201d6debe5eb008a6debfbdc3b","sha512":"cb641d54680e78ff8f575ca1746319f42acba15c3422bb40f011421545ac0647cad018635834fc9ed553c7a61e0789d329c18a774d1dcd5fdb52d207e69768cd","ssdeep":"","tlshash":"7551321fb0208e9618b3187e613a719622329d69f2098670a015dca42eece4b1777dcf","size":2939,"data":"","first_seen":"2023-08-09T19:51:14Z","last_seen":"2026-09-25T14:44:47.851Z","times_seen":65378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-25T16:34:33.526144Z","times_seen":62080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/themes/astra-child/assets/js/popup.js?ver=1786437131","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc48cdcf162f8b087ecd59d9a7e96de4","sha1":"90a7090bad79b2640d8f69d6830015259c2eaa26","sha256":"43982acbca3fc72925a5e30a9616ee15803fcae54f722ea4c5d63fe19dd96c41","sha512":"6e2204b4e92e6d71e757bf72fe9eedc14d4d87ff6e30ba5e06e4786586f173f250ada3232cc6af7569b3a84ea88d72ff23b0ddb7bf724b925ff2293005ecac90","ssdeep":"","tlshash":"21117b2779b2153266bfd26a23cb33582630145731068ee83c2c874a4fd0f585691def","size":1050,"data":"","first_seen":"2026-09-25T13:57:02.839552Z","last_seen":"2026-09-25T14:00:06.801069Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc06080ebf979384eaf92a5f1cd7a50b","sha1":"1474b07026c758629a82df51a5e4fbb7abf531df","sha256":"c50a0b33030ba0ec063be642c297f48af94359e2222ff140817248d591faf837","sha512":"d6443028105566717f328c56d17a0694e13905aa008bd36ba744e76bc5181e854ab80563be1d3167d728bf5eba6c502d7e36aebf0ed74504c88e47125cc710aa","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFX:qNdi7anPH5FL736ePkP/","tlshash":"fc62e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","size":15315,"data":"","first_seen":"2024-06-19T04:58:57Z","last_seen":"2026-09-25T16:33:52.457947Z","times_seen":156487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://canvathai.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"canvathai.net/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout-grid.min.css?ver=4.13.6","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.798Z","timestamp":1790344569798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout-grid.min.css?ver=4.13.6 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 04:20:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4dcff9-4164\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjmXq8CXeIaXF2FR%2BFcJZaCvVHSK1BwvKycM7Hlwz3SMtLJ25reFW9uCQoLz%2FuxJqpBxLO6MzYCkEIFQtAlr3aymDpus4QNJPMrPyd2MlPI%2BL%2BT1DGie6qk04Im3WgBg\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a40a87d93c36a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16740,"size_decoded":2799,"mime_type":"text/css","magic":"ASCII text, with very long lines (16740), with no line terminators","md5":"4a30be73b97fea0a05297b6e4b8ac6e3","sha1":"30a7bee00527ac9e702ca662d3ecc44a1aa3c8b7","sha256":"cdc69b44144ee2b8991a424a55467f11241be70349b2040a1dc083df445cf838","sha512":"12c9d92464f69665a3ec2825121a06f9539aa40e14c0ad0fed5aff669e9dd65c1c1aecb46db34d8b414ea5a5ece43a8b83a54fdd3f7a7cff5aaac62001eede8b","ssdeep":"384:OtVUXkEzOm9Oq/tGChyIchGe0RGAKGApU9a:vGAKGApU4","tlshash":"fc72e1eb84382d7477edb59d7c4030d63c26d13cbb482179aca51b0d86da6eb36a170e","first_seen":"2026-03-10T13:15:23.286884Z","last_seen":"2026-09-25T15:31:27.489213Z","times_seen":3545,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/homestyle.css","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.833Z","timestamp":1790344569833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /homestyle.css HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Ey13e5fDOARWoJFZ7EpMW3oA5dXZjm5aRsn%2BW1EzJxNlW39ZSs1UxarXniIWVus4byxLGCoRpg%2FpI5RtDT3HLG%2ByUXAO0xO%2FzxxJUoT617OailB3TT%2Fs%2Bo%2BTnV9vDHs\"}]}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\nstrict-transport-security: max-age=0\r\ncf-ray: a40a87d97c4da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":746,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-25T16:26:26.128283Z","times_seen":562736,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/657676537.jpg","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.864Z","timestamp":1790344569864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/657676537.jpg HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 25 Jun 2026 03:10:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9c25-1f810\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xy00LtwTGDRRmeaxU9tZ2t4sgs2NUrsC1FCEH8448Sv9ZM7K6MM%2BY7B%2FXO%2FVk4tydwg3knmBrPjQUegRrnihnyu%2FMidcWyIxSZGILDUXQ8wIxhHSN92uC2pIRpx0elHU\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ac61a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129040,"size_decoded":128437,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 894x596, components 3","md5":"bb65f4b28e8992bb0dc72835e97d14b2","sha1":"5ffd17a3b04c0b578e82544aeaabe4511a05b739","sha256":"e7ebb389fbe8b368ac73897ba12ea83bfaa66f954ffae0b68ff3a89d8dc0f0ba","sha512":"71ad4105f81efd94c9f7df6f0d77ae2ac47f3c47e3207cac2503b4485c7ee07a6d53531a52d6d7ffb180227fd7fb7c6deec6e145d60b9a0ab14949f97d5daa9f","ssdeep":"3072:2a+tCfjNU5+GIJQRwftYOBweyP6EuBBbwmP9cUakYH9E:/+tixUrOBwXS5SvH9E","tlshash":"3dc3127922644a2b93bca3786ffb5901ed4552078bd396973f9411c37b27eac03162cb","first_seen":"2026-09-25T13:57:02.821282Z","last_seen":"2026-09-25T14:00:06.735709Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":857,"receive":432,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/canvahom-06.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.879Z","timestamp":1790344569879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/canvahom-06.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc4-96fe\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BtSzcU7pwiNYWPGTFLWKgdb2SQzxmaGOxzqIcTw8gbtpj3Ae0Ix4c0PiTZmh8trPhN1S5ktQ1tFGwcDmDnmTj5VqwvRJy3bDE4CVSl%2FQLC2tsShw1I3AS8rcy4UeKllc\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9cc71a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38654,"size_decoded":39382,"mime_type":"image/png","magic":"PNG image data, 405 x 405, 8-bit colormap, non-interlaced","md5":"4d216eece368de289017f3c0924129eb","sha1":"116845d13d8a9e0269d7729774dd47c78c022a66","sha256":"96af5ab327e6c6477a5f8bef3e6a35b9e216b4dbd1f4f4c2e9739c1a6ebb7851","sha512":"91b77d0459ba4a82ab9dfb9b14efa8ad162d3e738dac5ffff500b0277895d2acd472b8a8185e6e855165ca0810d80c915de1b2cb573f4804b022dfda4013990e","ssdeep":"768:373BIwoE810NQrfqEmpkQKLtPdS2Mmdw2gR5oPs8Y0h1g6nTY:LCbpoMfqbkpy2XdgMsLhG8","tlshash":"3003f28d0b9d7790c3b29780cfe9fcb8a3695e9d6823d230741a3cb29535159206ab65","first_seen":"2026-09-25T13:57:02.822374Z","last_seen":"2026-09-25T14:00:06.768582Z","times_seen":2,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-14.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.904Z","timestamp":1790344569904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-14.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9ccc-1c89\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1RME57brJa3d5jYo4YYBF4nJ3s9%2BdMPRo7fKUMBruqkIplGv5GqFLAtOb3ioMXYLYlCUi7B1TRHD00vCKoqZsNtSjRZz8gOTWsk03Fps3zzBqoT%2BXh8PGJXZY8exwzY1\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ec90a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7305,"size_decoded":8110,"mime_type":"image/png","magic":"PNG image data, 445 x 261, 8-bit colormap, non-interlaced","md5":"6957d9f48da3d562c61ea95bca07a708","sha1":"71c7869bc38292f492f2b14eec5fa12f3879bebb","sha256":"8676b5c3da84507944c42c6b6e6c6243263a16041a15ca276a7e9044d0116692","sha512":"555278e3c0a37566e62b4d557d4f2b1b0fb71d8aab7a3db849a4dde4f08f215545534cba023de52f73f7cc49b19036be04a435359b21d28e817984deb0cc79cc","ssdeep":"96:KS9EtBVG4orgcjS7YzUDFn1OQgcCwiUG2jHNcv8SqzOT0nY5khTZFZOtZWclsJpu:KSoz/oY3Fn1UhNt2K84OluWclsJplPFO","tlshash":"4be1afcb523c021397d6dbb9480ed61536feede50dd665b3c4230cb905b5d4c0ca2a4b","first_seen":"2026-09-25T13:57:02.823544Z","last_seen":"2026-09-25T14:00:06.807546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-15.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.905Z","timestamp":1790344569905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-15.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cce-16ff\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mlaIiaMAIMU%2B3uRL%2Bks5A0%2F4ipBbS7Asg%2B4xiNYvzsNWV2kWjSBau00vy3tiTgAupgHaLuBhYllQlSWc6VSfEAP2gPw9LjW0B508jbZGZaLwbUSiXUW8DEOOBH3f9ffh\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ec91a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5887,"size_decoded":6696,"mime_type":"image/png","magic":"PNG image data, 404 x 263, 8-bit colormap, non-interlaced","md5":"3c6799e16b5d664219c5b69e7c784526","sha1":"48ca52f8cd8be7f5acde78f14c67d1f4aeaa3a09","sha256":"c6b3792612df443b43a3dbab7a4d22decd7ba171c3bc59c6a222ba33e1ec3084","sha512":"6a43bf011e78662be0af98781a8bd24f21a6c435bf6ff21bbd1e926a37c8206355562225488d4bf03cecbf2294762c2f02751e93fc9073a3a77200ac477be814","ssdeep":"96:FSKJ97zjbtZfOU9MgO7UvtCcPn3VLhxGg1042XfdOF+iCleHQPebIQ3Iikhd7OM:FSSHt5hXOAFCcv3VlDC4ifXMHCebIRi4","tlshash":"7dc18eeca7fb58a5f225480a7e66834417cf5411be6ec05bca8b01f6d5cc9831e46f94","first_seen":"2026-09-25T13:57:02.824686Z","last_seen":"2026-09-25T14:00:06.771412Z","times_seen":2,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-21.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.912Z","timestamp":1790344569912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-21.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9ccf-11bd\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R3CHH0Cbd9ZcOKqVGFJ%2FOfsrJFwhguRKMa7VONJZ2JMMTyhQ8Yj9%2B5cNlxQsLOPWwrZx3m9rXOSStK3G959FV5SVCZc0pJcyHykwKPlklVbFqggSwAvbGvVZ75aPgu2f\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9fc97a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4541,"size_decoded":5326,"mime_type":"image/png","magic":"PNG image data, 423 x 102, 8-bit colormap, non-interlaced","md5":"bb3479911546876d736fd7e36608324c","sha1":"68e4cc06b4ab7608429fdb05a14fa77b8490f3ce","sha256":"b244a55a3f50fd2bb4f6e80a23508ef3f2d2f92c313a8932a30709b8c7795c2d","sha512":"4ad8acf0a09f77158a4c3bce2f2c137a81cb5a887df7795ade4448f8fd6f8bb783cd8889e7b59d6973047283c9c5248625282f6aa570dc71dbb008ae26abdaff","ssdeep":"96:xS0FFJAk9T+HmFrHQJ5UdnGzjE6z9B2rrr5LeS3Ff:xSogHmBQJ5cGNZbm","tlshash":"4a918df0cf75e93edf8ab0a225cc5cb87670f3d25583d8802c37b2be4698b805a11650","first_seen":"2026-09-25T13:57:02.825791Z","last_seen":"2026-09-25T14:00:06.791667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T13:56:07.323Z","timestamp":1790344567323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://canvathai.net/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://canvathai.net/wp-json/wp/v2/pages/65\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://canvathai.net/\u003e; rel=shortlink\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yqRdw9S%2B%2F66BhPxph%2B9qkK%2BAnSGzjYWtOtnFtmU9GfP1H%2F6pAx8wPw2AJcjz7N2dijZrKxGEdLEPXpkvG%2Fq%2BPawQ3zkN5XBVnpH7p%2BY0uQrxoM3TrNWXNYfG2lxhr8IG\"}]}\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a40a87c9fa53a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WooCommerce:11.0.1","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":298803,"size_decoded":49886,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (58231)","md5":"4dc6d4c0c4bfb32821dfc9aa92220496","sha1":"37d785b92c60741fb185e510bbd3a019f9907c72","sha256":"b366f7af008f5ea9f9f1d0fab2a116920cade1dc0d3c5dca8bca8af6c96281cf","sha512":"66ec96ce469fcb13925858c8825e072ed8f193dc92e20a2158ad3849875ba85252a6e96da841bd83cb1d28c8d694328aff57b85936d81089918cc747d9bc01b4","ssdeep":"3072:r4j+mkxiu5dMANABfAt3tcypNLCb85Am4I0RRKfAC5e:reR8m6t3tcypNLpSjZ","tlshash":"ba54a77252f0163231ab93a87a65770e3f54e913db1f52c576ed46c84fcaf828823a1d","first_seen":"2026-09-25T13:57:02.826805Z","last_seen":"2026-09-25T14:00:06.783375Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2500,"timings":{"blocked":-1,"dns":6,"connect":17,"send":0,"wait":2065,"receive":411,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.813Z","timestamp":1790344569813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=11.0.1 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Sep 2026 07:59:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9928f9-10ae\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w6ExekzIe3r5O9zrm1cE3gLd%2Bak0xk1tZBGZtLywOePl9jpHJnrrfXhqGK2CapnhC%2BQzSFZj9%2Bz5HOYgRtUAUEBLMjIt1rdgSVHvedL%2F2aACvlAuddsH%2BqSiOcz7HGve\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a40a87d95c45a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4270,"size_decoded":2387,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4270), with no line terminators","md5":"a5705b9052821b74c1909a723583893e","sha1":"b908b327c44c8813020f7df9260b00513df4584e","sha256":"17daa5f5929c3deab38ffaacd89b213810e35e7d3ee115fc890b6bfdc230a9ad","sha512":"426dec929e44ecb6979356abcf8a55ac423fcc06bc47b5e4eb824640542b8c3f07a6e5c2aace46a6cf650dc7672e22545c85c3885e2665f0af6c402d25e737b8","ssdeep":"48:0ncEupIicboNb9j5okOBRQJ8H6xJsnDpr6r75eGSqlw4Sd+uOujoKsPPF3cLR8pL:0cEQxc4xN6a8EJWrO75ekw4klctsd85","tlshash":"bd91782774216d7322fb75ba2c9ee98414331639a8414501b509cf6c3b7e8ca7637f2e","first_seen":"2026-05-26T08:48:57.166241Z","last_seen":"2026-09-25T15:55:19.224042Z","times_seen":15332,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/canvahom-12.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.884Z","timestamp":1790344569884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/canvahom-12.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc3-9caa\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oiYaky1WEd%2FyzK9xNQsVqxKuCzjGyG%2FoKZfuUH4yU9NKoNIY%2Fx0HpLW94AqT9SVrr1zUqQ5YkbqO%2Bhvc6ZdOh9%2BfqIj3%2Fs%2Fc9Plrk8ZgXTpLZOJScD20zdq2jJxN5QmI\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9cc78a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40106,"size_decoded":40797,"mime_type":"image/png","magic":"PNG image data, 341 x 256, 8-bit colormap, non-interlaced","md5":"a07b50463bc6547f0e1b58ce528b17db","sha1":"b05e829b6241e80dd5365ce9b5cf4ba69bd03f32","sha256":"3a63f64ee170cbb6cc2f2eb354a2e20ac24e67d5c4d7d580ee538dcb3b39cf8a","sha512":"96d186df4d5daf207eba463f21729e7485cb79dfd58acd285e354afe0ce2dc8e0fddbbb597809429272d8debae378d4c28bae730b80770105755c37a4bb7c2b8","ssdeep":"768:73lVGIk/Iy/sQDBDGobqGO5GF9jlQB3NsnloxX4n49O5MOSRscn4Lr7kHwSgc:ZV/Ny/5pTnO5Gpu3NsiY4cKOSRs9Lr7U","tlshash":"9803f14480e748686e52f38bb7ed421b1e300d2b0159df9c493bb6917e75f288ee42c4","first_seen":"2026-09-25T13:57:02.828457Z","last_seen":"2026-09-25T14:00:06.805504Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1072,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":870,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:10.877Z","timestamp":1790344570877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://canvathai.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 338454\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-25T16:29:02.451816Z","times_seen":297551,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":42,"send":0,"wait":28,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:11.151Z","timestamp":1790344571151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-25%2013%3A56%3A10%7C%7C%7Cep%3Dhttps%3A%2F%2Fcanvathai.net%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-25%2013%3A56%3A10%7C%7C%7Cep%3Dhttps%3A%2F%2Fcanvathai.net%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcanvathai.net%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Jul 2026 23:38:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a50310c-58e0\"\r\nexpires: Fri, 25 Sep 2026 13:57:11 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=poh26RjfBmuLCY4gesDw7IyPl3XOsHmnYkKT6tpu4Dd7fJm7GRQ04%2BrpAw4WBUCbD3ozzKjnlmjE7phlvDlkG62ZkE7%2BgvmoiBCH5ahzaBTScubttrBdIIH17uEEZBRq\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a40a87e1bd76a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22752,"size_decoded":6278,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-25T16:34:33.526144Z","times_seen":62080,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/07/cropped-imgi_47_canva-icon-logo-symbol-free-png-1-1-1-32x32.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:11.690Z","timestamp":1790344571690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/cropped-imgi_47_canva-icon-logo-symbol-free-png-1-1-1-32x32.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-25%2013%3A56%3A10%7C%7C%7Cep%3Dhttps%3A%2F%2Fcanvathai.net%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-25%2013%3A56%3A10%7C%7C%7Cep%3Dhttps%3A%2F%2Fcanvathai.net%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcanvathai.net%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Jul 2026 09:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a477c66-67b\"\r\nexpires: Fri, 25 Sep 2026 13:57:11 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NgcNJMi%2BeeQbfS2Uc4h0A4TPVZTGatmyyhr9Mi%2BGB7I%2FCI2f6%2BXl7Dp7Dm42o%2FkJR0gtxaLYhZjYhBeK5Z9SLY0JukbILw1mrIlefDwhmAwXO0ewjOGrP5rUZl3l0CDB\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a40a87e51de6a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1659,"size_decoded":2472,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"93160373d7b1dec73f5f19d843aebb82","sha1":"c9232dbcec4099252359ba05bc77c1d226b1afe0","sha256":"4f4813b9ca3abbcfa242b35ed718d1864a91c69ba70ffef91c590264bd893e7b","sha512":"c1cca7dfd17d21ad325390269514038fc4f21191751e96fd0faf3b81ed5a0764c3bcfdec614738914199150bf964b6722015fd47d8f4ed66ec1417815269e8ee","ssdeep":"","tlshash":"bf31f8f2c125149f8e2c0f96ba298f0da6b18f49a14a393385b78d4dad0454a10b0a7e","first_seen":"2026-07-10T16:17:27.500333Z","last_seen":"2026-09-25T14:00:06.747921Z","times_seen":3,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.13.6","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.563Z","timestamp":1790344569563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.13.6 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 04:20:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4dcff9-af69\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5tj2WH6%2Fy1Dx1t1UgGbcVUGQ%2BssrEra8NVPmNsFxD8%2B40MkBL7Q69NEeWTPPVNYhHelmXxZ9UVj3wpF67e2sGVUbgiExfeW0VbQ%2FUe6K47eODl3Pm7yv40Hn0WN18Xux\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a40a87d7cc0da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44905,"size_decoded":9657,"mime_type":"text/css","magic":"ASCII text, with very long lines (42831)","md5":"59ba42eb79745cd0a1a444e6276814bc","sha1":"2cf148963a92c716b6d659fa32eb1dbeedc6180c","sha256":"84aad614f8b95ebd3a4ac6f7633e77323066d31da87afe3dafc8c14cd3d0f8fc","sha512":"688100a439b43e47261f064cf5c57963fba518c4cdd6e8b86aaf4333c368992ac59b03133c26d8e364e59804f7072ff58006c2313a90b71ae2cb16b2d1446684","ssdeep":"768:NPQOnk1rhbYollnk+FHkFYCzxdvN3bR2/WLmiyCFS7QHQtBU5WOT1enhm2a7ZAR3:x6UY+LHQtBU59TwDuaP","tlshash":"9f13f86047d035395233473efad6ba082b694313d74f66e2f8ab8768c9c57c71a72a4c","first_seen":"2026-07-01T18:27:28.299627Z","last_seen":"2026-09-25T15:31:27.435413Z","times_seen":3535,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.807Z","timestamp":1790344569807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jul 2024 07:12:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66976ee3-15601\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T2R6yd2D4G0Ht3%2BAmkfDzYZeRQqMtmbuKRuAYwuiUt34pwK1qlSj9L05IF2ywmEQvxkSxMvcDkiFEVDl6URImHqa8bOqCCNyfIhpon7rcYvcjSXA11Va%2FBbAQqUtYFmh\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a40a87d94c3ea41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":31427,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-25T16:28:34.021752Z","times_seen":1069442,"resource_available":true,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/274527272.jpg","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.865Z","timestamp":1790344569865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/274527272.jpg HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 25 Jun 2026 03:10:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9c24-12328\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWT0wxUh2Sbg7Rr1OrAOKrEA7MeBYqmtg04FMFXYnHTASd0sKb5aMUU21%2FBrZkCl9a%2FsIkkGXPQmluxxDk6k2QhlzsCL1kXez%2Bi4ogT%2B8qQQCP1M5W4HtOqk79icG93J\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ac62a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74536,"size_decoded":72975,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 893x596, components 3","md5":"23c9f35781b195cf39b7bf747f197e95","sha1":"312da5241f2015155f926831901e778c19fc868e","sha256":"3d2343ff25f27b53825a286e4c59b5d1750458cfd3b65c7c387581ca1e06f587","sha512":"7197fb7a5d9846c4ec6a36ce3627ee9c9acb851831cf291ce97469b55ff40d9b86be549a5fa8cc29c281b012fe14a02943f10e055201e66aedbda5239c6cc777","ssdeep":"1536:8WEq4mxmt8veCpa4PFLRd9kwRUQePFA+QIE5U4K7:85IxmAeCp69QMVQInv","tlshash":"9773f2043d559ec7bc4e72582070c0def95f9b03f3e8acb71487961fa5a05a24e6b8ad","first_seen":"2026-09-25T13:57:02.832716Z","last_seen":"2026-09-25T14:00:06.794645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1064,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":845,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/3893983.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.866Z","timestamp":1790344569866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/3893983.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:10:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9c33-1d67f\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VLkrGJTUoxdGX5%2BdIPhixGvme2rnJSZjjWuNcrnT5QCp9Zj7BNRF37Rp0MAfIiRjewA9jD3ZETtFMbv85eBxd9cBSGE39myNJ85BXUwyJOiDV31R4tMwFRVkvDM3dMti\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ac63a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":120447,"size_decoded":121281,"mime_type":"image/png","magic":"PNG image data, 812 x 452, 8-bit colormap, non-interlaced","md5":"8c0c9cc67c9b2706c2fdb69434878160","sha1":"8a21e725e79a090d0877aeeaf079b6b0b84dea8f","sha256":"a27c271849e696932eb0008aa233d63424c2e5b77013510b9ca0f9f4df315759","sha512":"407b20a2f7633129d0c58dabb6e86ebc02cb9c81be13cf73dc14a79cce9f97eb75d11c02d88cb8dc5b93edbf0d79b3890ba5dd64250c03b6512233435eae8eb7","ssdeep":"3072:ceN4Ki97K1E9mRzC14+aEGtXB3Ibb2NwAqjSLOAGTV3t/qP:B4KplzC14oMx4bb2NwNjSLOTqP","tlshash":"c0c3129d775e0977284a44524786822acd6afce8cf0511e34bf62eddac3e3910c0d9bb","first_seen":"2026-09-25T13:57:02.833903Z","last_seen":"2026-09-25T14:00:06.750943Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":476,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.869Z","timestamp":1790344569869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=11.0.1 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Sep 2026 07:59:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9928f9-10fe\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tf4fdzvUfyA9ry9jAGZlffnUv2yYXF3OPrm1TnpisyMkdcN9abp5kApFRHEwvUkBNJ0WX43Cq32eBz4BJlMwofqrUnkvJpZJCyKuKKG%2FjlbngEPVU8fMYXebue3YhBJ0\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a40a87d9bc65a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4350,"size_decoded":2235,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4350), with no line terminators","md5":"d6843fa9b6dfd1cae807f2c375830d09","sha1":"cc378797cb063f3981907698a6cc01e539eca654","sha256":"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070","sha512":"c9eb3dd5c84945d185f5ccccd954ef9546488e4979f9b3af5de54e107b2d0f8959e6c54509eee41f5ab67eb28488476e9a7751cd1a3fe671b618316cf944f3f0","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VP:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VP","tlshash":"119173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","first_seen":"2025-11-27T20:47:57.43318Z","last_seen":"2026-09-25T15:39:23.106556Z","times_seen":54482,"resource_available":true,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-06.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.894Z","timestamp":1790344569894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-06.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:28:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3ca07a-4f92\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ST1oDZbZONo2i3M7%2BerFbwjodHvlkFpHOGbqiHlTNCuqik0v48x95WfxaKaXq24BM5JMA6gZtIuCzkGTkA9H5RWjSWrrwFWiy%2FDJsLrRT3CutoKWBXNHswgTMIog5Mu\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9dc86a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20370,"size_decoded":21175,"mime_type":"image/png","magic":"PNG image data, 275 x 275, 8-bit colormap, non-interlaced","md5":"8ab81fd7c97d7ad0cdb25cbb2f45131f","sha1":"ab4b71994dbb17bd665e6cc459809a0bce14bb4e","sha256":"655edd7a20efd32980b62af9be4b53753a6bc8adb23ab1c59b07a82454807d11","sha512":"2afb0975d6f0e92a6bb404ac207395c735d68c0bb9f8ec65083b603963ce082bd978d66517008bb0abd188c7e220e30867a7a5042b4ed3d7cc4e82dc7efa7667","ssdeep":"384:Y1cinCaHBcu6vrfpzPg3vh4GvUGr0P4upG2rhX5I/c/1ruSJPkTBLV:uclgdgDprwhLUGbKG2FJI/OSQPkTB5","tlshash":"4592e076c70c200381c69fefb3bf0b205a9a9a5a0bd9d2f2de9489bc17350676718335","first_seen":"2026-09-25T13:57:02.835541Z","last_seen":"2026-09-25T14:00:06.770729Z","times_seen":2,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":864,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.797Z","timestamp":1790344569797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-11.0.1 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Sep 2026 07:59:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9928f9-36bf\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJlEjH3DriQ1imsxFJlvGRMkbRiNRzJzuS9jMq%2BCMtSAfhP8yXHWV8sjQ49loIELjn5zbc6lFdMB5wK70i9gQMfVen844QwN%2Fb2nnl1rHH721JyWoL7FCbkwtXq7O4J0\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a40a87d93c35a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14015,"size_decoded":3443,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (10312)","md5":"baa4742c2c66c769a0ae0fafd1166771","sha1":"81c99ce8a8697789c4bcee0a3fcb12d035f11bab","sha256":"7185a3b34994588c017191cfb740e497fb5f3b887321573d2c1ec01896368528","sha512":"4308297f1710f1d87fe1c4a0f748cc377cdf3803f73c3f07d813d8509eb147807c5a7053e0d0b6a5669b2b6ca12a969f22f06a4019936e520121988b9ce5739b","ssdeep":"96:JctcybwYP5GKHxNBQUEr2xT8l/0JYNFvyadAePOO+yH1:eF7RGKRNQr2Gey","tlshash":"985265b1e7b52cf8493989649e70b6d2b5f93080cbd325d9d04ae580719f4aa0bd27cf","first_seen":"2026-06-24T23:57:37.031995Z","last_seen":"2026-09-25T14:00:06.7455Z","times_seen":3065,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/themes/astra-child/style.css?ver=1.0.0","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.805Z","timestamp":1790344569805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/themes/astra-child/style.css?ver=1.0.0 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DSc1DYTbpMfn54KsGuURX5WNZi3n6ZZme0FN%2Bw%2BTBmvEcMS%2FQoW5fNihewGCpq3CVrWGWXALyvwqCROPDzvp4MfEtxY74uPAfJK8IZ0xTELvJtgzTdmtKc8cXDnJHtJs\"}]}\r\nlast-modified: Fri, 03 Jul 2026 06:53:59 GMT\r\nstrict-transport-security: max-age=0\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\nx-cache: HIT\r\netag: W/\"6a475c87-156\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a40a87d94c3ca41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":342,"size_decoded":961,"mime_type":"text/css","magic":"ASCII text","md5":"db2b1aeaf945fc69f43f50c030350d65","sha1":"eb83625ea9158233557654544030c88a9dc8efff","sha256":"5a0277f4db9b3783a9bd34bb97d2d92e0be9ecd20ea8cbb107f2ebfd0eb03c14","sha512":"806927f798b89b8843c2667002fe6f07b8d842c01bcc9090c41c4b775d0223578dc1eba7df695f8a9bd562f676d2723c4f731a2f7cd5b831fd47767fd8afca2d","ssdeep":"","tlshash":"97e0dff20667976427b883241839b2113c6cbb30c8c638d486c32f1800e034050ba75c","first_seen":"2026-07-10T16:17:27.485659Z","last_seen":"2026-09-25T14:00:06.784252Z","times_seen":3,"resource_available":true,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":642,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/07/CanvaBus1.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.857Z","timestamp":1790344569857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/CanvaBus1.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 06 Jul 2026 06:10:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4b46ce-7015\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFbDe4UpETIdj6eDv%2F%2BmH%2FnK5UybR1KSGbowbf48w1PWvgBSLXAPmFieIHFjJY073rxxiCxrTVdrB%2BuNz9WuSPTzMhxDmOH9coeNT9wXw1wom7uDNwN%2F3KMRoU4bzXHf\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d99c5aa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28693,"size_decoded":29132,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced","md5":"8ab0a3a0a2fab0da5c6bd7ba11c90600","sha1":"b5584265be1c569f77377f4f703b51bab06c7e5e","sha256":"5b29ce941cba1310465c66a634f24f963708523da96b8f9a989656d5adde927c","sha512":"2e94fdbdcb4ed7262dcbaead465243643a657c4d20f84a78f4c2fd72578f6890c6823a47b44061c89b90f9682e32ce30bf1d4d16dda677535e25b7132b4419c7","ssdeep":"384:rnjx+PC1NCleiHbkKsZCV/Yyd01MhQLyXyEGt+VWCjnoG3bbVLv3v8dy7wqELFHS:/AqPawNZK/ld01uQ2X0+ZjoGhXELFHS","tlshash":"66d2e1df78b180fae1fad5fa9382978d4ebe583589bc7085083602288d96131d34f95e","first_seen":"2026-07-10T16:17:27.448324Z","last_seen":"2026-09-25T14:00:06.73464Z","times_seen":3,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":834,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/themes/astra-child/assets/js/popup.js?ver=1786437131","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.871Z","timestamp":1790344569871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/themes/astra-child/assets/js/popup.js?ver=1786437131 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Aug 2026 08:32:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7ade0b-41a\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aQjkQ5iip142nBb161TUV%2BcortHUuvPOn%2BmiP4U%2FdjZKkqyl6oEow0MiA8VJnoHHT4lZJL18jNJijodpvlND2DROLP6NUWZrgT%2BMOLsKWz%2FQIh7CIS7eflO0JP41qwHT\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a40a87d9bc68a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1050,"size_decoded":1295,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"cc48cdcf162f8b087ecd59d9a7e96de4","sha1":"90a7090bad79b2640d8f69d6830015259c2eaa26","sha256":"43982acbca3fc72925a5e30a9616ee15803fcae54f722ea4c5d63fe19dd96c41","sha512":"6e2204b4e92e6d71e757bf72fe9eedc14d4d87ff6e30ba5e06e4786586f173f250ada3232cc6af7569b3a84ea88d72ff23b0ddb7bf724b925ff2293005ecac90","ssdeep":"","tlshash":"21117b2779b2153266bfd26a23cb33582630145731068ee83c2c874a4fd0f585691def","first_seen":"2026-09-25T13:57:02.839552Z","last_seen":"2026-09-25T14:00:06.801069Z","times_seen":2,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/canvahom-07.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.880Z","timestamp":1790344569880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/canvahom-07.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc6-5a94\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wmhs2GCkDIrHpH6dwI4gIiqcbdIBShNZzG3HGSKU239t8Uzyqx5hp7xE3pXVhRP7wELniZy86Kj%2BvnTeXVdF5Db8dKLSAggAHBKV97N8XGV1BJ8kvlvC%2Fg5ixrwjaTjN\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9cc72a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23188,"size_decoded":23856,"mime_type":"image/png","magic":"PNG image data, 341 x 256, 8-bit colormap, non-interlaced","md5":"c25bab89965ca2401fec44445c29e035","sha1":"8d8482c34d522cfb672db637ecd0c3e3bc7e2fad","sha256":"d72e53130931d35441147d3346d041f193d19ab44decdb27319c79669130aae3","sha512":"b8fa7d557e3fb7b2ab303935a7e1bfd72c8c6b795938876004d4505fd84ce754ad9dcc555bf72d13db3dff5f2f61e74224f2df5e5451e794120c4a8ef3172aed","ssdeep":"384:E9kVWg+pP5oyFDS8JpWRxjxOlI/umxl6TTN85RcXcUf39b9u14KWaDbZ:HVjwFVsXumKTTNk+cs39c4K1","tlshash":"b3a2e0776dade00926e42b15332e47264944ce39971cac7c855af426e5bc6f800fd3bb","first_seen":"2026-09-25T13:57:02.840615Z","last_seen":"2026-09-25T14:00:06.765565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":860,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:10.878Z","timestamp":1790344570878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://canvathai.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 286511\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rk2EFs4voYvuGcI0rClVWV8Lw5cs2E5tQE2jfT9phdTjlMEhfnRuZvzqERBDoQ3%2BC5W90px1eeQWI956AAapnjZPwBpdo29r4zAXZ5SjwrZfShBBFRw0jcKxwZGhM%2Fjt%2BaaKHsYN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a40a87e00e0456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 156496\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156496,"size_decoded":157495,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-09-25T15:26:41.819348Z","times_seen":53528,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":6,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.874Z","timestamp":1790344569874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=11.0.1 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Sep 2026 07:59:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9928f9-3bd3\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHdeJC6sr9j3NwlPmZlIOcGT2DUbIlPpJJeM3LC58gKPeHTj6NIsMdxkhJxPniYsk6pwhPm81EpyWaRUvNzj2mYTZh6nPvujqXj4JBQolm2xXlh6WSjsmakCni5cmiFM\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a40a87d9bc6da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15315,"size_decoded":5606,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15315), with no line terminators","md5":"fc06080ebf979384eaf92a5f1cd7a50b","sha1":"1474b07026c758629a82df51a5e4fbb7abf531df","sha256":"c50a0b33030ba0ec063be642c297f48af94359e2222ff140817248d591faf837","sha512":"d6443028105566717f328c56d17a0694e13905aa008bd36ba744e76bc5181e854ab80563be1d3167d728bf5eba6c502d7e36aebf0ed74504c88e47125cc710aa","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFX:qNdi7anPH5FL736ePkP/","tlshash":"fc62e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","first_seen":"2024-06-19T04:58:57Z","last_seen":"2026-09-25T16:33:52.457947Z","times_seen":156487,"resource_available":true,"data":null}},"time_used":697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":697,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-08.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.898Z","timestamp":1790344569898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-08.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:28:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3ca07a-47d1\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gsXGKGA5HvVYaSXMmmzkGkp6QA%2Fj%2BO88SpfK1ULgFfxgeg5gYTM3Ui5qcYW7GaWuG3OpWF%2Fa46eFtxyaltr%2BPbZFr3Mol1w21%2BRQuJLl%2BZ1ijIRiuw%2BPP7VxZAWH%2B9E8\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9dc89a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18385,"size_decoded":19107,"mime_type":"image/png","magic":"PNG image data, 534 x 278, 8-bit colormap, non-interlaced","md5":"d982e3c2ecd6ae7dc3932dcbe9ac48a5","sha1":"ce8be09687da3ed9b360d64046ba63b295a2efa8","sha256":"2044a090fc8f000eb5e4d1f43b011a8777868fce558eaac10510c69abc50d1e2","sha512":"d02c861c9dcdd0eec4fde249ca69d86bd8bc4636c7855b185bf6d1915e1713a4751fb26a7ca3d4ca3896088f66bd763a2ea53c0965f5a663dcce4d681b798b52","ssdeep":"384:5gaCyEq9w2Xlt5E5N/YszcpVI2ta1UB0PqZe7Zgr6OmHTMFOJb:9Cyx9tlt5MZYftaCB0PN7ZgGOggcb","tlshash":"2282d03b08cecdee8362aef24a0510dc1e5f9d89c8271ed4b95d39a6463d056d4e7d43","first_seen":"2026-09-25T13:57:02.842735Z","last_seen":"2026-09-25T14:00:06.736777Z","times_seen":2,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":906,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter:400%2C600\u0026display=swap\u0026ver=4.13.6","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.794Z","timestamp":1790344569794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Inter:400%2C600\u0026display=swap\u0026ver=4.13.6 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 25 Sep 2026 13:56:09 GMT\r\ndate: Fri, 25 Sep 2026 13:56:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5054,"size_decoded":1362,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1a1622f39e9f351ab38999670ba20059","sha1":"4406222602ad0faf8e26423edf040c533bf72b82","sha256":"f0287112ce33d05a0d208d75dd84334092c60e78efbe859c3042c942edad764a","sha512":"1a652ecb2a0ed226e3e3b97c38aac37698b59d5ddee47265aee94c639388cca8fa8737892e94e70bc1415107f572c07585696c77c0f0903dfda9f814a82ca8e2","ssdeep":"96:aOEaNqOEaXFZHOEamOEaO3vOEaBOEaBJc+uTOEaNcNDOxMaNqOxMaXFZHOxMamOQ:9NNIxO34OxDNNryfO3iExlx","tlshash":"b1a18992002ba400ab971dc273cf7f3aaece50856085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:23:42.312671Z","last_seen":"2026-09-25T14:00:06.772041Z","times_seen":5605,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":45,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/themes/astra/style.css?ver=7.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.803Z","timestamp":1790344569803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/themes/astra/style.css?ver=7.1 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 02:38:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a584425-11df\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rl7ToCgcroe98mkcaxiD29RVnTde%2BWQHwUekOms%2F4HFoOjAYkuaOGBLPHSyDctXKw9eJPwmD7LHfBYs5nV4AN6FqrGAgWKdGbM9F%2BfuanCMw18lObSYncgvO2S%2FWb6OT\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a40a87d94c3aa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4575,"size_decoded":2662,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (921)","md5":"c79ea710aeac987080f31f6624364fa6","sha1":"b1377c40dde36bba1fa2d6ea58b66d682fb29c80","sha256":"6ce302269b11bbb6828ac8a75fd79e22f5f39a9b0ce858af3556c57fd436c2a0","sha512":"cd26e6636f61406fbf42384a194cb84ee4eb9149192013218542dab231317c91b38ed45139dc1c6f13b8770096af2640d283e91cceaa5e087c65f13c2b50dc98","ssdeep":"96:xQGtY5GTPKPKeg5b8wBto6ASOhEVyH3wvgoPj+yNzICMNnUe:xQY4GWLRwjo6bOhE0H3wvgoPHNzLs","tlshash":"0891c7f7971201330f900be7fa4a7099e72ae149f5a490d0f49b417c71d893d6bb1278","first_seen":"2026-07-08T18:32:29.249031Z","last_seen":"2026-09-25T14:00:06.780183Z","times_seen":28,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/07/image-1-_3_-150x56.webp","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.831Z","timestamp":1790344569831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/image-1-_3_-150x56.webp HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 15 Sep 2026 06:14:45 GMT\r\netag: \"6aa8e255-179c\"\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2E%2BORU6BUErSkjHBWrJZ4%2FD3Rrm%2BOKyqlZIzOoYqV3KYqRFAk8mTgcYZ6UXlq6OQnAgZwE3JWzpNbkmVEHCGGuQ8SeCOngbHPC9idvr4Ai7nRpLJuTXYIa7dtMePLH3U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=0\r\ncf-ray: a40a87d97c4ba41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6044\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6044,"size_decoded":6765,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cec0a0857f393cf786bc762962a45265","sha1":"d2ba044a36c2f480a4fc826e25d94c6f92d558ce","sha256":"2ea8adb6d92719120c67a832040ace4281bb202d29471cfc6f1a7f7e185facd4","sha512":"257559095f3e07cc5588006a68303aa7bd66c836c69d08d47217f73b207a9bc49ebfb45c27926a4e5946dc582cadb509dba40eedffd93075da1ffaf376969fee","ssdeep":"96:KzKNabxIYyeToz/K3cMhCaOhEOBWXXrFNiyjB9AN4wKhylcJUGDhdurKyFXyVsb5:KONsSekz/OCRLmXrF4yV964jUXyU8yue","tlshash":"48c19ff3fd131c8a12a20772607e5b2484b07e06771f0dfe6556c56c6e8ac3a9378ea5","first_seen":"2026-07-10T16:17:27.487158Z","last_seen":"2026-09-25T14:00:06.731545Z","times_seen":3,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/bnCanvaHo0001-1_2_11zon-scaled.webp","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.852Z","timestamp":1790344569852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/bnCanvaHo0001-1_2_11zon-scaled.webp HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 25 Jun 2026 02:52:50 GMT\r\netag: \"6a3c9802-26acc\"\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FtLm%2FIkOMHvFFw9cXFr4pzEV8EIAjWVIsc6%2FFSgiqwtGDG8XSvhwplx7n5oETzuVkvRWIhxEEBxLhYN3Pvnqs29Kn0zwC%2FMisKazQJGI4vnGtKztJ%2F8w6994CxGKkMd2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=0\r\ncf-ray: a40a87d99c56a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 158412\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158412,"size_decoded":159140,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2560x1207, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9c44f774e4c2707921314b1812e852a6","sha1":"91b59cf29dd1a56a0ee029dfe250f6bb4a6a90b5","sha256":"fa070bd5d034be2a287958e076ac95ddf36afb4fbb70541b15d2aea538d41c76","sha512":"ee94e9c80cf4554db68e1a48e663f0f95919b8de9bf5de858a46d75a7f4d4eb0194911d52074550d9f33263fc7d1b90afd706083f8546eab4137e414c2388539","ssdeep":"3072:fO6y5ARG6pxSa+dF3kvNCbO1L8PPGpY7zp8/owN6oF3xm+rWJ:m6/NmuNGOJ8nGCCowP35rY","tlshash":"87f3239bd463609d62c408f50f1b293cd6cd830d0dc2e9123e91693eb3fa56de69726e","first_seen":"2026-09-25T13:57:02.84707Z","last_seen":"2026-09-25T14:00:06.793035Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":428,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-13.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.903Z","timestamp":1790344569903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-13.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:28:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3ca078-2f7f\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKkkNraqfla6Jl%2Bm8tdOBvBU1XQVHs3YiCvWiGYECEXWdd8bM2Xp%2FAiZtsWSNhO8gYI1dukNUmWinFiNiwDDrWSEgtiYS4PCFmtM4%2BK7ytgLOb2Y%2BPMzGAi5XZ02TRZh\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ec8fa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12159,"size_decoded":12777,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"93b05ce3883a1b1acea84f933dcf0720","sha1":"9b40e1de286fbca755f97264df6b78932bce5cd9","sha256":"b435c8ac054d19b8eceef970d319a5dc0f02f21daae04eb35e49194ac0f76de2","sha512":"7baac0b9aaa97911cfbe26198901f795e6efa5bccba37610b31ce64b3afcb8514e3c1db06f2b2975d1f40bc44ce264c0002b0b7e3be768e6db2185ad6cbe4772","ssdeep":"192:5Sdx22LeypEHwOyksGffg7NgU/OQNYXVa7dOYUyJLTcOJ+eTli4EyOkdsAH9bL05:gdx3VEH+ksmIOU/rYI7+2EO4e5iByOkq","tlshash":"7942bf4e8e37de72eb6433375d617387e6498378b87e30fc0524a6407aa2d41e5c9687","first_seen":"2026-09-25T13:57:02.848098Z","last_seen":"2026-09-25T14:00:06.737975Z","times_seen":2,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":873,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-17.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.907Z","timestamp":1790344569907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-17.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cca-2139\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9iZW3BXLaKPbNZhoY7I8hFhGAMYAaxmOVTDTm782fbQ13WABXGzhW49KuzcirBHyLlrSXrYtbCkyo4EMyDixNxl2h%2BdJE3KdPKS8nitXQ%2BswIokeCtGKNqJ6Mgukm6Q\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ec93a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8505,"size_decoded":9310,"mime_type":"image/png","magic":"PNG image data, 428 x 131, 8-bit colormap, non-interlaced","md5":"0916862beedee267f5bb66a0ae6af6ec","sha1":"5b8ee31ad230e52bb3e02bc0cbaa91f4b6f408c0","sha256":"4dba380d79f7559cdb4d3f54b55992a8a78de529e850857d9b822878f2e5697e","sha512":"a7b4001d773e68d5f2d39a4dd74e63669c3fdbed14e1db32ed1459072b05d5b62442e95e9089be26a70a62f0cf566ca3886fd3f950c199898f861766e2fb11d1","ssdeep":"192:NS6T5vRmHhvc++XzufT95TQFd2kWEseHyJJlSkUFhVHVEvQ:M6T3mHCJoaX2ZEly7lSbFhV1EvQ","tlshash":"5a02cfd99fd0f90bfb2e2373e380785f1ae771ad0242cb05a59b5da62a1f0c5645c8d2","first_seen":"2026-09-25T13:57:02.849176Z","last_seen":"2026-09-25T14:00:06.785976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/bnCanvaHo0001-2_3_11zon-scaled.webp","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.849Z","timestamp":1790344569849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/bnCanvaHo0001-2_3_11zon-scaled.webp HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 25 Jun 2026 02:52:53 GMT\r\netag: \"6a3c9805-2a980\"\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRWq9JPAnGzS09BzT39pz3RvXoWLoTIXZIn%2Bs%2FcNCGlivB2rUgmuUxm3Y5op4UCxQvGSI4RnrEq8TG0UWS4HhssoZe%2FGeB03EoVEv3wCjtFk8o52sm6JJGgdQ1NhMNJd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=0\r\ncf-ray: a40a87d99c53a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 174464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174464,"size_decoded":175188,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2560x1207, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"78acd1b95067e2ca407de315e2ed03d3","sha1":"f99dab4434b8c134ce0104d2fd1a6baac90bc0b3","sha256":"4f6e8b19d6568db856ec8032389f80159c85882bfed98230f7b464d5abe1a25d","sha512":"b8c881bc2a065f98f9e014358b47a9e66eb171bc766e28f558dc49e8f2b5cb5036e7215ff8f32360864ec9143517704b0c6a7c70cb9845743162ee6ac1d5766f","ssdeep":"3072:J35aurnhgePZvqca7hq/z5kfPzUU5Aqf6icb8VfBSosJXuky1S9QSNMYvFl:Z5afePZ8125KPT6/bafBCeky1SbNM0Fl","tlshash":"9d041287e28f3b7634602c4805ec6667f559e90c4730cd1cd3a62a4f59e2abf9802b1f","first_seen":"2026-09-25T13:57:02.850197Z","last_seen":"2026-09-25T14:00:06.753678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":437,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/3838939.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.872Z","timestamp":1790344569872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/3838939.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:10:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9c33-1abb9\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ewbrUoejH6N6gheutghzUAizoJoB8Xwwm05B7XNs%2FakWXBgQ5%2BbAPK%2FHvC%2FyXm8XTUNJ%2B50wDobdjjf6wwCEygVyXZJyhEqGXd1Gw%2BYeJK6n90qI2vRuov%2FpCmsmhdhy\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9bc69a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109497,"size_decoded":110263,"mime_type":"image/png","magic":"PNG image data, 767 x 522, 8-bit colormap, non-interlaced","md5":"f7cbe98b89ec763a4b29671348590728","sha1":"50a35fbbfbd21ea6de20eaeb72300b58b7c0158c","sha256":"5d1c3c752cff164cb12f3d5e5fcaf6b68d66f937773c6818ad05720ffc7be7f1","sha512":"e7dd7b286133bd47e20436c40a4c192b56206a0c7f513d5dede374c65143e36e8aba2e0e892d795d9270184432ecf02dd892377cf397d785766809336c70743f","ssdeep":"3072:4AEhytmB7lTcpz6Zfg7H1MeeatsKJfPdLSKx:xEh0mLm6hg7VfSqdh","tlshash":"5cb312846c6aa24ade30ea43b977bd4e019b7e404549919c8c797cf22ffcc246f0f259","first_seen":"2026-09-25T13:57:02.851602Z","last_seen":"2026-09-25T14:00:06.764902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":868,"receive":440,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-02.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.891Z","timestamp":1790344569891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-02.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9ccc-1be2\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1ekqDrzRZyhAf%2BrPgIsFx195p7sPa9zQvjidQVt%2BTIORn7Na7pfTTjuZUeksx6g%2Fl1K0Vce4MRIw4Y4fHc8HJhAdnJN8XqZmm03Es0TbguYRejItXmvZFr6awEEW2Mc\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9dc81a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7138,"size_decoded":7938,"mime_type":"image/png","magic":"PNG image data, 498 x 227, 8-bit colormap, non-interlaced","md5":"22aec488778aec093acce2332412664d","sha1":"7677d5e20d918de4f8457dc105c28aa91d7b1d49","sha256":"55de73c2725b9b83d6b4b7206a73429417d91eab4fe2c6b6b270341df36775a4","sha512":"89ef9240f9a64180d9f02304f22619d284fefaa27d8ad6d9d6fceeed288144831f7d7c6e039a39205438ad6c2e49b32d4241718bfbc4f047ca120a44ffef40fe","ssdeep":"192:RvSWBtZcweZ2madI83bQjyvgw6aFCkbFV2TejHVa2L60ziZLen3pH:ostZzZ2SbQs6aFBeTk+8iZLwpH","tlshash":"7ae1c0af0458ce57c5a62482a6dd5170d32c1f6014f7d51a5469c09ba68b1fbe770c38","first_seen":"2026-09-25T13:57:02.852593Z","last_seen":"2026-09-25T14:00:06.790664Z","times_seen":2,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":642,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-09.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.899Z","timestamp":1790344569899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-09.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9ccf-11b3\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYdkL8gVjUuH7qDi%2BMjLOn0tSB1%2BCojqxNoN7UD4ZYfssobNH7AoBfw4T87Vc5sQH9zdkw9QUPC%2BVzaG8c2p8EB5YiIsQybxRI2r7ZjDUCi3%2FS8h9Y4PoXXd3dwOv8CL\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9dc8aa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4531,"size_decoded":5295,"mime_type":"image/png","magic":"PNG image data, 526 x 159, 8-bit colormap, non-interlaced","md5":"1bd79ba55907881e96f2bcedc4ed2a46","sha1":"1b59f677024185520542fec535402ddf406c32b1","sha256":"4262898fcd94636f26cd0490d30230a51808975db767899917b019c65ed0f2ca","sha512":"72b4c254034411b2bd7af6347e88b216a191faffe0d1e87d3b457481c5420fceb1dacfeea87c7e9f85b023d56f55d51ea3aebad5a48883d43e84dabfeacc40fd","ssdeep":"48:+/6I6HfItSU/JmRe4ds3otgWmDPXQDKRvUvtT5EcjjA/ULBLeqlcQ0qnmQV50iCm:+SI4fgJ3AWDPhpUvtVjTBaql5tPeK","tlshash":"66914bd384e8b1afe18e74779ad6c7fa02206abb45738258546170cdd94970063ee46b","first_seen":"2026-09-25T13:57:02.853555Z","last_seen":"2026-09-25T14:00:06.802045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/07/58468.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.913Z","timestamp":1790344569913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/58468.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Jul 2026 09:17:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e15a0-2c6e\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEdBtYsq3qp9ktnEfiwTT20ooUfnQlruIp5BhIxzbvncrIkGz50DCOHld%2BJcT1DaxYu5anpHbvIcMYHNPB80XPoWCKdRL3JE4yJdHXXo%2F1QhG6eNnCRv1NGu2OhCX%2B4z\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9fc98a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11374,"size_decoded":12148,"mime_type":"image/png","magic":"PNG image data, 569 x 150, 8-bit colormap, non-interlaced","md5":"69c64258b00453e54dad1d6ee4b1fa23","sha1":"a5c56edcf3a58e0bd61f707dcc414d23e95554b4","sha256":"f7da1ab57f04e9a93f9780efab43449b5e7bb07df3e004fdaaf9374fc69789fc","sha512":"6f69fa242b13e1793b02d0a3ec80d67c382f3337fc1ab955c2ccdf44dc17ff9a1391ba40740b8a1f362468a8fda7bb646ad6a1e47cea4ae2dbc3488e435bad11","ssdeep":"192:Wwar46hSwwD4OROStziqovjDIVMbFEMEJxw+CqYTlzc9L/RgNPX:Wwy4ewjROSvKIVoF4xiP545s","tlshash":"0932cf70d453a00b6323f90b01a32215bb191db345d2badf72e47b56d831e6d10da1be","first_seen":"2026-07-10T16:17:27.489558Z","last_seen":"2026-09-25T14:00:06.743074Z","times_seen":3,"resource_available":false,"data":null}},"time_used":887,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":887,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/homestyle.css","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:10.698Z","timestamp":1790344570698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /homestyle.css HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=itkMImMVuB2Pgu0RTXZMfIl%2BAyCM1dnmduvT60mFRtyZONDglqrJ8vLQ970pX4UknrLnIln4%2FjpL1SmHE3S%2Br9%2B%2BGrO%2Fgwld7%2BoxMK3bsyjDGZVNjelbHPgWkpcHjhN7\"}]}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\nstrict-transport-security: max-age=0\r\ncf-ray: a40a87dedd25a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":753,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-25T16:26:26.128283Z","times_seen":562736,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/bnCanvaHo0001-6_7_11zon-scaled.webp","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.856Z","timestamp":1790344569856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/bnCanvaHo0001-6_7_11zon-scaled.webp HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 25 Jun 2026 02:52:36 GMT\r\netag: \"6a3c97f4-31584\"\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2rIfgY1eFgUpb0yuO71eyjufghwh3eOSjkEKgtG3gUKFk83bACL100w1tbU3x%2BSrsnFGx6O5jgEmjVi4ZUhFZimFtWft%2BLlzLJy0ggbXlcLb%2BysY3t0ggnzmHNN6YXY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=0\r\ncf-ray: a40a87d99c59a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 202116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202116,"size_decoded":202840,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2560x1207, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0ba8e553c35b252d1e92c76674be4cd3","sha1":"813d0180a2fcafdc48d49fafabe722f90c62b52e","sha256":"7334bcbb44a1a571296e1e71a073e4ba0ebdf04841011160989af2bd90f3cd16","sha512":"a436642363b01c6c103ec52d6c02feeb0712c197aa2302352cac6f84e6260816d6a8ec98683a121c92904f9a5475ad6bfff1ac2e7adb9b6a6ee29b61b1ec2ae4","ssdeep":"6144:HYM1JVD4cCaK62GtEECUzgAnheOz99AYu0B:H1JScCar7JgKe2jFB","tlshash":"29141248866827219551a995878a90e4bf1a08b37fe393220f3953bdcffb405d26cc9b","first_seen":"2026-09-25T13:57:02.855563Z","last_seen":"2026-09-25T14:00:06.785129Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":846,"receive":469,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/07/CanvaEnt1.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.859Z","timestamp":1790344569859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/CanvaEnt1.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 06 Jul 2026 06:10:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4b46cf-9200\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HPQ8123KPslADlnh2MR394PjQFGLUS3d%2B4L6ohjRcT6ucdGEw%2FDY5wUdA2DTYIfcXoZGLNZbt%2FKp1hubwaz2F9XVaUm%2BAriUZcJGij5viphEGjPngEi1ZQ5Sjl2EQEm7\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ac5ba41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37376,"size_decoded":37833,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced","md5":"a8cc73ab2abea9934ecd1812ffdf6cb3","sha1":"8633d47071b5c3d715bd40c32dcdaaa3cf8b5139","sha256":"54522e505e5251f3b7de54fd460e1f90bf6e593b185914bc7ead06d09222ebd5","sha512":"01bce9a44a9f73e21cfac2b119a6a3d89124e806123aa45251e247c46162e319a5521ae33bd86a87b7244e823d019df3552e055ac8d0e4b43a3883e3bf87e448","ssdeep":"768:Q32URKawlWHqWd0V+UmVfFCMUd5xtr/85v12BF3YK:QZRsWd0t6f4MQFr0BAvD","tlshash":"84f2e10cb983564edcffbeeb5f9911d840754141ef9451c7420924a336b98c19fbab9c","first_seen":"2026-07-10T16:17:27.493554Z","last_seen":"2026-09-25T14:00:06.764139Z","times_seen":3,"resource_available":false,"data":null}},"time_used":932,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":859,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/canvahom-00.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.860Z","timestamp":1790344569860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/canvahom-00.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:11:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9c4b-1a26\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yulLDM0%2FbOyblatuTMprHlcNTAFNSUng4SV4NztRnrezlIzDhMTNdsL4ANhPurdmmTrlh9ZF0Sw6h8mfaLco5gaLY2BxcyDWsFD%2Fmo3axXyBukze1t%2BQj%2BDpuDEBE1z0\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ac5da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6694,"size_decoded":7503,"mime_type":"image/png","magic":"PNG image data, 191 x 154, 8-bit colormap, non-interlaced","md5":"5b243590a389555aea5bf9319a33c47f","sha1":"5e67f4c1422a534fce54da24f3c63a6fb97150c9","sha256":"d5e4565155a35c47debafd5ec17113c7b1dd730cad9bd30b812c4d3564569209","sha512":"b9321a6e2edd7fb32f70807173db5a909d4eb2e93a2b5608842840002c2422dd68851ff395e999e21c21c50f674e7d510828c1aafc7e38c0dc250085e4a87c45","ssdeep":"192:hSYdEW0S8chMnzbWC0tMSqIcwDZeP8xks7Pa:IY9X3WHWSAZU0kj","tlshash":"43d1ae0e280b629880bd38d676f54b37a81077ac983f7ca1ead422500d35394c55c3dc","first_seen":"2026-09-25T13:57:02.857411Z","last_seen":"2026-09-25T14:00:06.750182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.876Z","timestamp":1790344569876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=11.0.1 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Sep 2026 07:59:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9928f9-987\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0S1AwpYmLeqQcK%2BAMz2Re6rDy4hBDe9qHoVooN%2ByHxBpOAX6tIdRDP0%2F8KUPpZQhExgUojL74BnpkeyB43cWfWdyzVPMp3FaHw3P7DfYkThWCTOka%2FscebhtxYC13IcV\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a40a87d9bc6fa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2439,"size_decoded":1946,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2439), with no line terminators","md5":"46a816ff38bdd095e2118365ad4c618b","sha1":"c58ae69eeea5bf2846b88a6c7cbaaa7728a2444d","sha256":"0eb862a5891526d089b727fdfa30222cca4b4d75b5835727bf57df17436256f6","sha512":"b6650185967270b09fed48ef9937d21ae45b37010aef6b6a6a4ce3efb295bd39d3734b1cce7535e126cb255b1a3b40c27dd97322f1b70ee0e1c67163e2539cf4","ssdeep":"","tlshash":"41418335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","first_seen":"2026-02-05T17:32:11.552459Z","last_seen":"2026-09-25T15:39:23.020785Z","times_seen":48497,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/canvahom-15.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.888Z","timestamp":1790344569888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/canvahom-15.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc8-42ab\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=riYeE1U2v15QwiuoxmcZQDrOLHBD4UoGloh4hwojiMzLamEN5HCLC6drjsyE8hjid7evvxdZkGMNKKyLyF%2BEzIPpyIXQMhrtXbu40tOOw2Qlyot2%2FekO%2FnAxE0H%2Bxb4w\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9dc7ea41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17067,"size_decoded":17827,"mime_type":"image/png","magic":"PNG image data, 224 x 168, 8-bit colormap, non-interlaced","md5":"e4a784a3e5f7df95dcfed9d88012fdff","sha1":"e0a23d7c47f7d800bc894612f0d17d058f733185","sha256":"406829ee229f04af2f282bc70f9e6d0728bbd8ae52a484d2bca534d4f5fb4733","sha512":"157625234e3ef02983cc86ca5166e4d2d032b18b17d08163028791f53121aedd9167bd4267793a5b9411f4bc92c4d4783fba058a0f20304055a6974fc134acd0","ssdeep":"384:/92lLJUQAdn9nNtLvda2Q7E1+A1PhB9JGP+NCg8cAXZrGr:127U9nNtLvddeEAA5D9oPg8RZrGr","tlshash":"7672d0616a1bfb431ec805b183905b35b133fe61676422502b27313b1db6ad4bfa94e5","first_seen":"2026-09-25T13:57:02.858971Z","last_seen":"2026-09-25T14:00:06.806584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-18.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.908Z","timestamp":1790344569908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-18.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc2-d4f\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYfu31OyxfDIWc%2B5yjuMhlTXfe7JoxCKsx8nHO7m3OIrPa0WxsLCfhlkmnz8Y63mtZQH8DpTc8BZljIPTTqk9BfB0sMbiloGpEGjrzcAH5vzkLR%2FO6GWX16Q0ivmncZO\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9fc94a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3407,"size_decoded":4211,"mime_type":"image/png","magic":"PNG image data, 420 x 99, 8-bit colormap, non-interlaced","md5":"96ed92edb625d075b863ec235694b244","sha1":"527955b77d25f583c3e1dc8b5ebf7a99de508f62","sha256":"7c803f3f2fd69eded098a1d9752e4273f36ea9b96a5d85e2f6a99ffecf27d10c","sha512":"46d714158211524970b52eadfe028aa65257073feebe0633464fda124c7f6af9bcf6de80b477283c63f54c936508c6affa0f7372ebecf12522279cb8b700d583","ssdeep":"","tlshash":"39614afa8f47481eade22e0b6b6290b5a0633111a553f73837068e0c2594118a7d4fe0","first_seen":"2026-09-25T13:57:02.860054Z","last_seen":"2026-09-25T14:00:06.739085Z","times_seen":2,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/bnCanvaHo0001-4_5_11zon-scaled.webp","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.853Z","timestamp":1790344569853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/bnCanvaHo0001-4_5_11zon-scaled.webp HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 25 Jun 2026 02:52:31 GMT\r\netag: \"6a3c97ef-27ad0\"\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kGqidpZrnxKwxBFL1CXec7E5IkMhoWUn64%2B59MNFxQs%2FaZRjDXJAQRt0T3wQ3%2Fs113BRloWBxHupGKUBlv9BB9xh4%2FgZqBahz7zlZmVvNhqxAHtgm6kRN7fvc9eX1coo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=0\r\ncf-ray: a40a87d99c57a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 162512\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162512,"size_decoded":163238,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2560x1207, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"24909bcccec578068dec6095057b4626","sha1":"c90f64ab60e37dc8a0a9fd76e7ddb5e28cca1cd3","sha256":"78c2091b0a0ac0f30782c58fd8abb78ae3aeea129c72a3c17bec55e213f157da","sha512":"feaf6a8fa668b297313bdd055c72a2c27ecf59ef9acd8b4faac9dfcc579d1282178b720cc162f31f96768f3df399bbf10e88c207b658eed125d3e2b9b985b110","ssdeep":"3072:pbRxKaNab/y+PwkwFA7YYPYu1vBvYIEshnnMoXpabnpWrvWLbrfAv2gh:pbRxKSmj41ePYiwshnnpZG2vW3Zgh","tlshash":"fff312e9ad66e34d9f118920d225c2bb0f2f08db2e876037b8dffa17ce501cd9561691","first_seen":"2026-09-25T13:57:02.861034Z","last_seen":"2026-09-25T14:00:06.733451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":930,"receive":703,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/canvahom-02.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.862Z","timestamp":1790344569862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/canvahom-02.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:11:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9c4a-2cca\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SYiSYF6XjR%2FPC%2BJiqQ5fIDCn4mGcgaslwUDVlwz%2BaGdxt9MXqDEAmmN5iaaEWcrpv%2FO%2F0D3iajfNI3NGdST1WolFwVJVzoQxPHR1xPnO94M%2BHaWG1rddJIOdW0Kf5avh\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ac5fa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11466,"size_decoded":12163,"mime_type":"image/png","magic":"PNG image data, 174 x 155, 8-bit colormap, non-interlaced","md5":"71ced4ca51e900fb86c9240d97412fef","sha1":"2a91669c9e313978f2af5c41d5292f36bf10d8ea","sha256":"c223bfc15e6f5a6a9983516fc442198133d875e14e2be0204b16abc8fdf03c6a","sha512":"398e9b686e2d7291ece7bac45b71d447d7e31a71b427a6f4bc2fad35287d4e8b515df2dfae52571a17995f43de3988a3a2032761312035a340cdb40099602775","ssdeep":"192:qSFOMnJHZ2UeQBVk1tqFOIPDw6xdByyCOU8mgz6zXOvgqUdYRQUqQXSC:lFO8JH4UniqFOiDfwhEAFYRzV","tlshash":"9a32aeb5c8141f75cd95ab9979da558bc021e3c6bcb367bd0e0cf19c828b0dad824b93","first_seen":"2026-09-25T13:57:02.862018Z","last_seen":"2026-09-25T14:00:06.793772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":847,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.878Z","timestamp":1790344569878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=11.0.1 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Sep 2026 07:59:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9928f9-b7b\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYShhhcreS9CHgeH4mPUUc28qqHiQuCJUo%2FUf%2F4Qn%2B3m9kvc16cnt4qjsFFdLCZlxBaxUFfG0%2FnQqRmEqpBf6%2FCNGvz9aSHh%2Fc%2FtSz9deUbkezXcfUkOzp2%2F0XF0ISVt\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a40a87d9cc70a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2939,"size_decoded":1852,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2939), with no line terminators","md5":"ae52867db002b2f95a21b85b3b518a04","sha1":"4b1615786f2e5240bec4229c7dc5c6f865c92ebe","sha256":"592acc60b8eea94fc366110175d8406604a609201d6debe5eb008a6debfbdc3b","sha512":"cb641d54680e78ff8f575ca1746319f42acba15c3422bb40f011421545ac0647cad018635834fc9ed553c7a61e0789d329c18a774d1dcd5fdb52d207e69768cd","ssdeep":"","tlshash":"7551321fb0208e9618b3187e613a719622329d69f2098670a015dca42eece4b1777dcf","first_seen":"2023-08-09T19:51:14Z","last_seen":"2026-09-25T14:44:47.851Z","times_seen":65378,"resource_available":true,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-07.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.897Z","timestamp":1790344569897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-07.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9ccd-172d\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6amT3cwgoV4fRPsZerqNW%2BhW7Kyi3vDzKlLuexxHTWQPj7%2FmvqjAJ1q1Euv%2FC8BPhAZAj%2Bsh7Ut5bd89ae9E1Qij6xJIuDRrpHdI0rWeNUgmxXQFPeHPu1uBi%2FnukA0N\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9dc88a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5933,"size_decoded":6744,"mime_type":"image/png","magic":"PNG image data, 264 x 253, 8-bit colormap, non-interlaced","md5":"bfb6590c870cab11a9de82dcd903011d","sha1":"3b39bd6313dcbdcb0cbcd5b0837af1d3b9d22886","sha256":"cb758f7828be316e38d48cba9dd5bc45fdcb74f3dbba7adac71438963165e6fc","sha512":"be7ed842032d588977fbae61986d94cba994d5459ab83e3890a3beea1264bb924f6258622582af39020a54c4d4c07973e02543bc14d575be35393f7b2fa4087b","ssdeep":"96:zSq1QNFczZKSXsYYIGds6LrmMHsiGERy3IJ0/+vHmL+zx8P8ySn3jKOng:zSq1QNesnTrmSsiGoJ0/gGCW0n32Og","tlshash":"3ec19dce865e2335f91c9053e6defe2f16a788f3c7941a98282561f30a4970b434935f","first_seen":"2026-09-25T13:57:02.863463Z","last_seen":"2026-09-25T14:00:06.752339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":679,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-20.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.911Z","timestamp":1790344569911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-20.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:28:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3ca079-3147\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCpLduzzlZmpw7Bun%2FAfcNbhk4jSOerDvzFPe3knbiSOdrnjkewTAoNN1EWz47cPvkZVTDrL1%2BFJymKsigyAyWW0Lv0Y9f5FNlm9xnDQfdBAvzVV%2BlqF%2FZ0WBEQPK7oO\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9fc96a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12615,"size_decoded":13424,"mime_type":"image/png","magic":"PNG image data, 330 x 272, 8-bit colormap, non-interlaced","md5":"d990a5acd45f565e66b39441f01f0db2","sha1":"301da20f03a2d9523f85fcc2671a94540cd62057","sha256":"80c6bc8ec73d09c4cf050729797cfefd178226fe3085c871325546121afc5412","sha512":"ac3bbedd0b3d53796b6638b28cefc9731e9907bd90a9cc10cacb74dd96d2dc2adb2b615b9443b28db66c253d00e10367c1be143de82fb7d0a75be9bb2aadb865","ssdeep":"384:bCkwJZjkQuAtfAYJuGRvLqJJlxSpvYOjd3Ip6G43G+UUY:mkvstHf+XleviZ4WxUY","tlshash":"4242b0eec6e053319bfbe65f2180af5b1c9a1cd2420d0911e78e9325ce35b6f815c571","first_seen":"2026-09-25T13:57:02.864432Z","last_seen":"2026-09-25T14:00:06.800067Z","times_seen":2,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":884,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/?wc-ajax=get_refreshed_fragments","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:11.030Z","timestamp":1790344571030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /?wc-ajax=get_refreshed_fragments HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-25%2013%3A56%3A10%7C%7C%7Cep%3Dhttps%3A%2F%2Fcanvathai.net%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-25%2013%3A56%3A10%7C%7C%7Cep%3Dhttps%3A%2F%2Fcanvathai.net%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcanvathai.net%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:12 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zSRop82arlYRrccbAZN72Tv44wmpk%2BsEGMOU9hGWB8KmoInw9Pgnr0%2FHKGxTy3MfkqQo%2FyGMHC4vn5EVMKdb3R0XJZCngdGhGRFJGYk56%2FkYp7Qt75QR8emVj3VD9tYg\"}]}\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a40a87e0fd64a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4046,"size_decoded":2427,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"717dee771b8931c5fc948cf47b1c9c7b","sha1":"a8a61393f002a50a18490365d358ecbe02db1722","sha256":"b27a098e53943a417a2c919b6793f0ca02f426e6634ff4b5541d0f12e0fc383a","sha512":"391a6b4258f62d72f09391279abf6c771509d68a24dc53c988202bf061268207d24b34c6577379dafe4eee6c8adb1de73bd374eee95c259c48083cbfdd48ca18","ssdeep":"","tlshash":"728131d60339c97439d2bbe81e71798f7637ec99f87a920543e6250762cf9752224c38","first_seen":"2026-07-10T16:17:27.473972Z","last_seen":"2026-09-25T14:00:06.744637Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1563,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.810Z","timestamp":1790344569810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.11.0.1 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Sep 2026 07:59:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9928f9-25a4\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wfqLWMR61E6PFUM%2FrdVJeVoGCeq4LiOwl8A0iy2XgLV7P24tR9C%2B%2BFONRCAeuYa1QmwCWydKZpoG5kUuOyLdxGg2DqzlTm2T3YJYw61nBvBi52BGT5qqs1aUF5hvHHf\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a40a87d95c42a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9636,"size_decoded":4342,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9242)","md5":"ef56117d1bb5cc41aa6bd127a49c7640","sha1":"b9c2ed774177fc0fceba5cb58113024b23fe4fb7","sha256":"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620","sha512":"0ec9039dbb47470815ad8bf58fd206672717a146b3a99bcb12444687e8489698e06664e6c6cc38a5d2954fa919e5a6c3bc57e44f3be2655f92b801bac43ec763","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMP:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovp","tlshash":"9f12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","first_seen":"2023-08-09T05:33:46Z","last_seen":"2026-09-25T16:33:52.495013Z","times_seen":181334,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/canvahom-09.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.882Z","timestamp":1790344569882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/canvahom-09.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc6-5d07\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5DyMFjMzciQokLj9c6JoQbvu3PvU4uy1rgQraPpaeXtZZVBla18M2oPDer2zSIfFtsdDHq%2FL5CB%2FN2ZmyguG%2FAEwtzBL8fIkaYTdN6sMHRc%2FwJZBjGPx7acOBGjbN%2B6c\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9cc74a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23815,"size_decoded":24626,"mime_type":"image/png","magic":"PNG image data, 341 x 256, 8-bit colormap, non-interlaced","md5":"2721ba01d9ede0f660c0c6c0aabb0eb7","sha1":"dce32cf2fb4b1fe2466724820eb15238ba6851aa","sha256":"6b5dc12de5c4d76d4b3caea0797179d178d06e767fea16ba692255791d5c193c","sha512":"bb2d648426c7849380bc8104a76fcb17fc6dceb3b9a4360e5c0edd836ba51f9277d13c8be944d2bd2341f568ffbd251a2f03d7f1509dcc84c3a85f4daed6b826","ssdeep":"384:EXMSjPDXuF2/vrC/P//kOwLsdDySK3FdXxsh0qIlJS4KoAv8SShPFHsf:G1YP0OeeWh3BRqgYwc8SAPFHU","tlshash":"beb2f114cb84b9dcba837e6f4671ef214ce2bc5a97054b3c4eea05a21ef7827cd42525","first_seen":"2026-09-25T13:57:02.866753Z","last_seen":"2026-09-25T14:00:06.766155Z","times_seen":2,"resource_available":false,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":897,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/canvahom-13.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.885Z","timestamp":1790344569885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/canvahom-13.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cca-2aeb\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tv1m29GYBuQSKpjbQj1nFgqiaAAUE%2FgdWSaesoMElaKzrNv5C18mYbOqL3qvCrs%2Bdz9t9jYY54HnFOG31FtcAFrOVXi1ljFatwTmt5Az5hZayFqQ0utLfUVG8EtpL8PA\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9cc79a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10987,"size_decoded":11659,"mime_type":"image/png","magic":"PNG image data, 224 x 168, 8-bit colormap, non-interlaced","md5":"11fbba9fd13170a0674c6d87fe8899a2","sha1":"c8e68e8f489099d67e4c1f36ebcf6725c39729e3","sha256":"94e67f0444dfde26342fa9b64bea3a1f4abef5dd751518d9a2c2f2f7a332d61f","sha512":"95f7ab47cb5ac85a6a22a79df24d57d6b92feee0dc909975f8a11d77292450c6d8dc45b80357ece25b3ca246e541ab2b53e80379d5da508a423f55f32d00720a","ssdeep":"192:4SRcQZrXA3n5UscbojphT0I85zv/8wze7JGkbefqh/nFiGDJ91W6RKJuXZ9SjSjz:/5AbHppTG/BeASefqh/FiGD39RKJuXjt","tlshash":"7932bfef2812dfa2d44ca9d731fe4336d210ad15a87782e4f4da347907b192633e49e9","first_seen":"2026-09-25T13:57:02.867715Z","last_seen":"2026-09-25T14:00:06.754468Z","times_seen":2,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":878,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-05.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.893Z","timestamp":1790344569893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-05.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9ccb-20df\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OuEhAJCrTM1Y6Nex8kBzJiDoKXwwb5TLcQN1wIjHidiUd2%2Bh7qwewp3sRtR7NNlpzvN8mZ2F9xpn2IXd0vYNULpGZAy%2BXrLqmsEfqx4nxq3asQBN0r1IcCgkVajI6fms\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9dc85a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8415,"size_decoded":9220,"mime_type":"image/png","magic":"PNG image data, 259 x 222, 8-bit colormap, non-interlaced","md5":"a1b973c6392751a0293c9ccd46be4874","sha1":"9929b8be605c510fe60595f1abc2e59fbca33b9a","sha256":"2995562590e20007941f035b7d8d6dc450874da77b83a83750f6df4ca28b0872","sha512":"ee20210dfcc38ca90795a9dad0a05bd6ac8d673722b4a51684fab6ae80caad2b5518c3c369ccef55ef025b1a7c1e32218d274fa8022ae0cebf2cc399c6f6ffe9","ssdeep":"192:m6S+gd1uBa600UzQZX58r1OAHC36ucC0WybHYcDyUMYr:m1+W1u8609QZJ8t26KD4rDKYr","tlshash":"8502b033fb1a4b27f3ae3d8851e4862db6469ade708409b775e438a43160071ca2e67d","first_seen":"2026-09-25T13:57:02.868761Z","last_seen":"2026-09-25T14:00:06.77374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-11.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.901Z","timestamp":1790344569901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-11.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cce-123f\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TD8MiSQ0kMmMwNy7OJ8f70i8oKZdz4qXdgiSAj4aA7NgdTGChdL%2BZQ8I%2Fasx%2FTxKJNsN3do52kKjS%2BPSS%2FgM%2BvIkO3ik%2BDYn9JJsLSD9SVT1s5l2BE7wsCfg8cy0FOk1\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ec8da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4671,"size_decoded":5486,"mime_type":"image/png","magic":"PNG image data, 427 x 253, 8-bit colormap, non-interlaced","md5":"b32ae867f06dc17fa5603985d8c8808c","sha1":"cf9f6fc36a4d12fefd77258eeeed774b010df666","sha256":"114d7e33aa5b6f22932584201b9b7a39ed63a286d723dcbe13529413937dc0c9","sha512":"315ba2ea5e9d7f0352a2193ee965179d299401abb53cfe8a9ba63ea1c9f69c9624dab88ac575dd7cd4a0a36ead6288bfb66241292f010ae050f1280f1ef72b7a","ssdeep":"96:YSNkjHTujTMxDxxf/tq0PioI/cEYzzhHPrmUcMdX5rffmqr:YSNAHTtxDxZQ06nQFPgIb5r","tlshash":"e7a18fde90712dca0cc119a4b80d9f440d754c71523c5a1c9d876da52b7bfc54eee1c3","first_seen":"2026-09-25T13:57:02.869712Z","last_seen":"2026-09-25T14:00:06.752986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-16.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.906Z","timestamp":1790344569906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-16.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9ccd-1a13\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6Ychuxegqlil7OWhyopvTNouXZ00IZYVee6yXDhn8g6A52vxPJDmqD6ychBA2aCm7Kus0luMQt%2BosHyPAmR1swjEPnIIcrahgMvEYXGEZfkZZFHxhT6KlUdiFkyju8s\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ec92a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6675,"size_decoded":7478,"mime_type":"image/png","magic":"PNG image data, 476 x 224, 8-bit colormap, non-interlaced","md5":"f49d2c0abab611aa1b5a7194476a3281","sha1":"ca4ff0c374ef3c6a774c8329b6ef8646ae43e981","sha256":"a591c680a103db23fea0f70139fb0d1194dec13eec6643512a6f40b7c5abdb89","sha512":"90655b7b4ec6d1181da928554f8bd55bce9e512fec6bf4827f7f700353a10e72b7ba0b1eb84beb86e72f153cfdacb05baa22b5302f762a74160455987dcffeb6","ssdeep":"192:0GS3+GXQRPHanecz4LC0+QRvVnXGhg03ScmL4j:0pRXPnpcqovlXGq0CcmL4j","tlshash":"cfd1aff16898fa524d56f0ab844cdba281c788118ed724e2d73001a6d81f49ef8d5cf5","first_seen":"2026-09-25T13:57:02.870715Z","last_seen":"2026-09-25T14:00:06.755703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":667,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/?wc-ajax=get_refreshed_fragments","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:11.105Z","timestamp":1790344571105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"POST /?wc-ajax=get_refreshed_fragments HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://canvathai.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-25%2013%3A56%3A10%7C%7C%7Cep%3Dhttps%3A%2F%2Fcanvathai.net%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-25%2013%3A56%3A10%7C%7C%7Cep%3Dhttps%3A%2F%2Fcanvathai.net%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcanvathai.net%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"time=1790344571100"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:12 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://canvathai.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BKG5IRrdKAUMdOjUoC2PpXsz8hSP%2FFaVXX0Os6hakWVeU1%2BhaQ5%2FBrrEu26pgVOcmhITXsIceQRQWe5vIpipkAbm0t3xBHmBixlW7rBjM0hQezgVcuHOC7FsnA243Gw3\"}]}\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a40a87e16d70a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4046,"size_decoded":2519,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"717dee771b8931c5fc948cf47b1c9c7b","sha1":"a8a61393f002a50a18490365d358ecbe02db1722","sha256":"b27a098e53943a417a2c919b6793f0ca02f426e6634ff4b5541d0f12e0fc383a","sha512":"391a6b4258f62d72f09391279abf6c771509d68a24dc53c988202bf061268207d24b34c6577379dafe4eee6c8adb1de73bd374eee95c259c48083cbfdd48ca18","ssdeep":"","tlshash":"728131d60339c97439d2bbe81e71798f7637ec99f87a920543e6250762cf9752224c38","first_seen":"2026-07-10T16:17:27.473972Z","last_seen":"2026-09-25T14:00:06.744637Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-grid.min.css?ver=4.13.6","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.800Z","timestamp":1790344569800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-grid.min.css?ver=4.13.6 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 04:20:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4dcff9-1cfcd\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0M55NgQ%2B2OKxKTXphphYDh4G0GTrNai6MxFWPtsdEtCxsZP7In6WhD58VuSXzPKJVohsUENeY9HJB9wU%2FFUqhBuuatFzaRpqg6K3%2F0k6kMA9ztE7V48sKJ4lJFFDQrP3\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a40a87d94c37a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118733,"size_decoded":17627,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"cbaacffc89aa2bc70ef8bd86a009520d","sha1":"34ce3174d6fdf788626be11e445686cb17611c36","sha256":"c2c65a202133e47be74ebb31ead0345a2a32d79519f928b8304d4f09d571d1ee","sha512":"ace2687c56c67ec48cc51ade11d92c9a8979fcb4d0ad3a610423dfe4e1cbfcb15a28366754c3e2f03007e0dcdb480bb34832e67228630ce5a1020c63d3b08daa","ssdeep":"3072:rE51S8C3n0zmp7POtUAS69LMFZxC2QX6eynyPJAdXmnOtxOVr5+0vqR8mrYU/lDE:r+z","tlshash":"65c34f67a1b02cb837eda7d8ac41baca7e10d13df2450530de9a5f1d42ca9e73522b4d","first_seen":"2026-03-25T03:44:41.382546Z","last_seen":"2026-09-25T14:00:06.767355Z","times_seen":2172,"resource_available":true,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.832Z","timestamp":1790344569832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 13:56:09 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 195672\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6YFvprWcSgSgFF%2FxVyzyRUbOKZ6vWZNvXeXbqnhnz4EOkXbSeafZrC%2FxPqBUSAxOffdCz4HWQrUHQm7bUQFG%2BF7IRMdzl%2BBAPPLVNbIJDqSQtd0MvqWsvpabo%2BZmcbaaBJ4bK1Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a40a87d98c2556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":19844,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-09-25T15:49:39.403485Z","times_seen":36597,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":21,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/themes/astra/assets/js/minified/mobile-cart.min.js?ver=4.13.6","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.870Z","timestamp":1790344569870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/mobile-cart.min.js?ver=4.13.6 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 04:20:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4dcff9-1616\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F66hAr0SBxMnVZg2bceVXhW2LxsfDYzRtNUGeI7gx4wLFQL3StZdq%2BYhOyZVB5pWwJH5%2BEqLSBh0O5ZbKueCYoH4zeQvfMh2sCthtCTupr2qlXlL1OedBQLOXOamVO49\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a40a87d9bc67a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5654,"size_decoded":2479,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5654), with no line terminators","md5":"b618e52e39937ce36fc0a1102f62242b","sha1":"468cce9b1889d2d2928258c3d8eacbd652bda3e7","sha256":"cd5f359a0c131bb6fd3aad8ba2b218df00316a3cde57ede69052dcac3ce97ad0","sha512":"35a427c9321c1fab8c25ba3de256d3fadedbe7b2d59d4804ad1f612963ac0409647b05de6b5d15e760599796c73a275ee86bc413ee4ee1dcf8698285b56cb694","ssdeep":"96:yKPuoNf2p0XCp82kQUzyDaIyk3z6gac6/R6h26qkX6xDRGvRfTS3c2oMu6wQQTKB:yc/XoPvUzyuIyA6/z6as6DE7S3ju6d2m","tlshash":"aac133646230b87108fb5657b6b7ebc4393268df641a0051282d9c9d2bbdfc251a1eef","first_seen":"2026-07-02T00:51:19.012204Z","last_seen":"2026-09-25T14:00:06.804706Z","times_seen":283,"resource_available":true,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/canvahom-14.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.887Z","timestamp":1790344569887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/canvahom-14.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc7-49d8\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qdx6fqejJqWBT0GeJJO2aVClQvf14BVy9PQlYSjxIRSnug4PD%2F7QXUyQZ%2BrxFJaY%2F4bKKJFuxxhe1iYAO1sH5aUC4GjBYJqvJ%2FzjaldhOIFMtbjj2KHv0KcM4u9IrAJw\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9cc7ba41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18904,"size_decoded":19537,"mime_type":"image/png","magic":"PNG image data, 222 x 167, 8-bit colormap, non-interlaced","md5":"1b67d838a931f60b40aee987aed37756","sha1":"b2220716951b966f8cb08d12e8a71067da22bb6f","sha256":"22c8660b5434dd927c795bc385044b11910eb25dd0632eab21ea7810b12f5d4a","sha512":"cd0a86e7ec8823f6b74e316d58c7f14107c35b667242c3ce552be033886380f24ded49e146c7b1ae18ba7583c1631125f11cd4ef7bd65f858dde8d5253d0ab81","ssdeep":"384:TXD9hq6GvwLNSIGnnGb5/QfxTe+j9VEravm1ERl5KPwK6yYQYpwrnU1:Py6GvwLNZAG5YfNe+j9VYCmalSrYQYpb","tlshash":"6c82d009c6d230957140959a718489efaa44bec0eec8c24496b37789b77bdab8f205fc","first_seen":"2026-09-25T13:57:02.873747Z","last_seen":"2026-09-25T14:00:06.751653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-04.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.893Z","timestamp":1790344569893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-04.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc1-fbc\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEAEIHTkXTpIC3cvsOIJn1xOxFrHwUlsb2gM4%2B%2BrpHU7lqHdPINlY2sfT%2FkfrTCT6LD79rlQgnLyWVmyXgfYUzy%2BROllxeuvZ8Yu3P3dHO0hJd%2B4Drl04MNpKMe4W7%2Bh\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9dc83a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4028,"size_decoded":4801,"mime_type":"image/png","magic":"PNG image data, 544 x 229, 4-bit colormap, non-interlaced","md5":"49bf9f98ae6fcca52fcc412f2247531e","sha1":"552b41661e4c24b2d06aa5a89bd438ae32d0a33c","sha256":"c4c562b7d027051cd6c7e58ccf2e7f7c2a7c42416035c415a153cf11055cac51","sha512":"c6a96d6e1039e486a0e7aa5f0ec60f08bd68ae9d0f8c788fd434d0f581623f7a45031fef841c023169530320049ea31897a5b2caf5de7116d5834b29a2cec8cd","ssdeep":"","tlshash":"67817f6a1b4d20c338756e8977be1fd1cb939b11a3eea190d086d7e4644ca3149cbc8c","first_seen":"2026-09-25T13:57:02.874704Z","last_seen":"2026-09-25T14:00:06.747166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.6","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.867Z","timestamp":1790344569867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.6 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Jul 2026 04:20:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4dcff9-6477\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WlAWesGgJZoYFtGKb7mg2Y5XwvD0Kj7Ik8lb5IIxst5s8xGmueKeG2%2FQZkPZyOFKDLDmtu4d1KjTesU%2FjKKrqhKhVyeMLl0JnKO9FRltyK7SlSkT96256BTnPCwkkaLj\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a40a87d9ac64a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25719,"size_decoded":6840,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25719), with no line terminators","md5":"a5803d1e6c10a93561d597d9cfb8477c","sha1":"e266c7046d41dc35d0f3eaf5b6e1020cf8dbaefc","sha256":"83eda8e5540512ca57e2216df1c90dd4bb2cb49f3f58188345de9582855648e0","sha512":"496675fe192e9de999bf7140e2e37d2a569bd509e0d22a54b123a5821d45eb1b578d436a7fd3fde6fb7a5ddb2beae9be5c3e4a63d2cb99441ecc125fe314ee95","ssdeep":"768:MtPx6KoYcFDTHjGropoCoRoXCjZRcjC1LlJtmxTwB2V7sEuUU2tfSrgt8zQmIFhx:4Px6ViOCjZRcjulLmxTwg/ZSnWhdcFIz","tlshash":"43b271a667002a3604fe17e7f5daabc17671149ffa0944115838cc2e29a8fc361f1af9","first_seen":"2026-06-02T18:26:47.183631Z","last_seen":"2026-09-25T14:00:06.748647Z","times_seen":3906,"resource_available":true,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/canvahom-10.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.883Z","timestamp":1790344569883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/canvahom-10.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc8-3593\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RshPa%2F33mAp5JV2c30Qws27ovsLM%2F6K%2Fq%2Bu6ZljwAbYgwkiyXKMw5aPf%2B7FU8F5lPAQkGhB90ma4TEBtCzp5wptB0y8ZgwHOk4blFU0XCFL6O4aHr73uUNPIY22gwb6j\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9cc76a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13715,"size_decoded":14526,"mime_type":"image/png","magic":"PNG image data, 341 x 256, 8-bit colormap, non-interlaced","md5":"b0bbc2fa48c5aded881d9b9252205870","sha1":"a7114e639657ec488b12ec5e561f72f5062736c2","sha256":"f8c485c446db10cc8e8aa735445ac34eca55a3fca53beace38a6d11dd5a33966","sha512":"3abe030e44203c16fabac0852138abd09e33d789ccd2f24f8b22297ef48aa9a86c23d68454a1ae5c0e5c339a6b9cb045a44c1051bc042b666f3358a6ebdd6694","ssdeep":"384:E0Q2mN/v9jntrUWfEH69rldkg+GLBaQwTfkj:Mn/VztrUWO69b/adTfkj","tlshash":"6552c0da2ffaf46f0570d95e31eb10f83be5a5b40449107bcd62bf39e6a0044d276225","first_seen":"2026-09-25T13:57:02.876149Z","last_seen":"2026-09-25T14:00:06.797377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":865,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/canvahom-16.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.889Z","timestamp":1790344569889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/canvahom-16.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc7-4fdf\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwQxFrD2OnExpvaH8aG9Z7TUKLHjaZMZw0Hit0ikPz3wcuCXCScpTZCO3LL%2BSrPg9badLJzzxI3oB2tYiQPt8zDV6%2B5K%2BZ3BGlncnSr3Q6dQpRUKFdTzKe6XpOcwbP0u\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9dc7fa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20447,"size_decoded":21254,"mime_type":"image/png","magic":"PNG image data, 207 x 173, 8-bit colormap, non-interlaced","md5":"e52cbc8d5d72cb32615249419a176d9d","sha1":"b53d4920180132d47c3eea879e92b7fbe091a4de","sha256":"422d0448ff14d45131f04a677f3374b4af3774c4b2e39d415a2a6119736debe3","sha512":"05ad9af873cb6bda537f0f89d6b5c08a3ab42e07b73b59ca080bc40553b925a6a53b31dceb0635bbf4e1a3ea6eff7bd9e5464d731c2a341bf064715660b5864a","ssdeep":"384:hPACsWhNPlQpGl9YK/0PDLfDHGtyElwocUY8oEyjNBtWpE6G9w1tU:hoCNPlQpGl9SPLHdElwocUY8oEyHtWp6","tlshash":"3492e1f94a3938fd8f506f564eb9006e12a592bb8e0e547f5f75104c9a3764b902cc31","first_seen":"2026-09-25T13:57:02.877111Z","last_seen":"2026-09-25T14:00:06.769295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/themes/astra-child/assets/css/popup.css?ver=1786437418","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.806Z","timestamp":1790344569806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/themes/astra-child/assets/css/popup.css?ver=1786437418 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Aug 2026 08:36:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7adf2a-4ec\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eTO1MBxWYQBw4e%2FIPmTnUPyrNGQuYzZXQWpA4C20k3sN46EXlHqkaiXu4VauP4Yw7AB9xHpbF26TJPZ7Rr6Q22yFwumz0ro1DCJB1IRAgDwLhOPK1lAW15AIOXXVeCEZ\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a40a87d94c3da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1260,"size_decoded":1285,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"39aaa907ac72551d58f1ec2cc397951c","sha1":"3e562a7bd7873dcf913d086eb28891bc323f4767","sha256":"f102f3c43c149268c3db0e914c8acfca21af6e33ccf139ede2e532cecee0292d","sha512":"8b3daa07baca705a6449c6f1dda86dcbbe8b84401f665d6adde9bf93e199bf643a85925c86d30f4356f04eb36d676b41b6b979a920003b9d34f4cf36b1035c6a","ssdeep":"","tlshash":"f521ab591a673414650ec3a96fa6971801384087a706cc6d37c9524d5f852ccf5aeef9","first_seen":"2026-09-25T13:57:02.878312Z","last_seen":"2026-09-25T14:00:06.788825Z","times_seen":2,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.809Z","timestamp":1790344569809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 17 Aug 2023 10:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64ddf4c0-3509\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ujXE7Jp8SMtqBCEhDJHh%2BtRSIIkvYOmC5eqhmi7CsjPa3MYQzofEr4M%2FZhtmcUmU7Ec2WvNrpyMQoWQnT5UpDc%2FtpGtCX6jC7SIIcM5WX%2FkuWMkoPSmQrDm%2FO5bO7jya\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a40a87d95c40a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13577,"size_decoded":5680,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-25T16:28:34.022473Z","times_seen":977395,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.11.0.1","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.812Z","timestamp":1790344569812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.11.0.1 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Sep 2026 07:59:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9928f9-6b8\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YraFLuqjlU3FB9RQe49YVFZolxv1p9eifOKanapHzUwCiEDcN16VLlPQ1aEhLX0zZyLV0ZzltLjddIXD5EnVpByHmP6Vxkt6x0zNPLHDhsqnJpLey2HJ2Xhx4L6Nh%2FIQ\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a40a87d95c43a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1720,"size_decoded":1623,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1690)","md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-09-25T16:33:52.451588Z","times_seen":160151,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/canvahom-11.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.884Z","timestamp":1790344569884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/canvahom-11.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc9-2e33\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9mraSXx%2FV8pNd%2Fp8%2BLUyCZ5lg2SIlfymSCaX3P4zix06ECMam%2B01RxGr9TNTX2lyQW9yA7IjL4hvW7vJnifogkuKZV5AzaqZ%2B%2Bj%2FkKg3%2BE5A4r9ktieFpGWs2OWTNiR\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9cc75a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11827,"size_decoded":12578,"mime_type":"image/png","magic":"PNG image data, 342 x 257, 8-bit colormap, non-interlaced","md5":"ad214d514e1f965a984cab07703b4297","sha1":"54d69aa6fe0f7c5d55a286d7baa761ed17b5cc97","sha256":"a016ac42033d9c360a055fe874eb34556a5f299f35b7f51437df160b5413684f","sha512":"e79ef53cab4604bfab156401640ea40af874d060763abb2976be5266323a33a3c5d6bee863577e768d5d702f58306a78d24d70e704248d0b41dc785efe7757d7","ssdeep":"192:ESzPWwRbRAYjKRiQWo5oKpoQzrVC+JJlp4DMC5nIqDOl1SPKUf/krKSphfoOFzfe:DzPhBuYw35vnVC+blCQCIqDOlQ5MKSjU","tlshash":"8932b0e21696c4769954d67cfaacdb44c01d1fabca7439911ae8f3a3423204d523dab0","first_seen":"2026-09-25T13:57:02.880286Z","last_seen":"2026-09-25T14:00:06.773109Z","times_seen":2,"resource_available":false,"data":null}},"time_used":894,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":894,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-10.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.900Z","timestamp":1790344569900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-10.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc5-6f02\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xjuRZ1t3vVZPQMF%2Buo6J%2FxiVmp9VJWjAMboAMX04PsLanFMA78gilGZcySNP2HwjKROfNrOHRXjho4VCYM5dAGkZADpbaoSxAWtpmCXiYU2vX8XqTjUQtga%2FC9AulA3w\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ec8ca41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28418,"size_decoded":29225,"mime_type":"image/png","magic":"PNG image data, 219 x 372, 8-bit colormap, non-interlaced","md5":"8bbd488443f7ad40e1aed1d13045ed27","sha1":"febaa58eec4d625a066856d0a9397ea37ab4e0e7","sha256":"ddb0cd13541e8bd01399d8f168a9bae98999b63fb5ff89f1a720c826fa34fc89","sha512":"07abf5078bdb870710f71ae4ce9d8766b4579c2e8d7b2581a9a208202aaf39d1e0dd2a9ed771670fba73e349e9b6a5d823f46bb061bb93ca3a57cc8d16f51e9a","ssdeep":"768:y9/p9Oxa1l1TzB3LFRlGHuk/Jxb72f7SEATtXQ:ipExG1Tz1vo/J525ATS","tlshash":"cfd2f11939cbadac5663990986a13153ee4e64fc5bcbc1f7a2341738f5f92ad8d4c0c4","first_seen":"2026-09-25T13:57:02.881321Z","last_seen":"2026-09-25T14:00:06.798994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":885,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":881,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-19.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.909Z","timestamp":1790344569909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-19.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9ccb-1d40\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EuyTqTbg9dz1%2BPivdtJnMW48uV6vfOUlnnI5fbXMNPJNmWbDvM8JtcJ4PVrOqdtNUwCdl6SyrTBaUBMrp10tT07qEtwQKa%2FU899ZmVfMWKXm7yc0B8k72mJTWtBs1EPM\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9fc95a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7488,"size_decoded":8293,"mime_type":"image/png","magic":"PNG image data, 484 x 165, 8-bit colormap, non-interlaced","md5":"b57bb687c679f533e4d0c9d82badfc71","sha1":"b180ee82e11eb29feef26de757c5433aac4829b7","sha256":"db3d1b4ec8f33619c109fe69072194cc589318e7dc5c088d069b6b0f4a897874","sha512":"6a76ce24fb36cbac48200b6621c4ff11b7b7236a2888029b07a195254f8316b9c1a89fd06ede81de3387c699a0eb5f2b9b12182ed2333cc703281b49e63be82a","ssdeep":"192:XSqV1SIKYlJIW+uDJ8LFXCGBaNIWvPaCDgKKR7mR:CqWGbwaq3R7mR","tlshash":"e7f1ae7fd8309f1d32ad87ad2cb828c2774fb8a73603642ba006d49a3a76845211c10c","first_seen":"2026-09-25T13:57:02.882281Z","last_seen":"2026-09-25T14:00:06.766759Z","times_seen":2,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-smallscreen-grid.min.css?ver=4.13.6","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:10.654Z","timestamp":1790344570654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-smallscreen-grid.min.css?ver=4.13.6 HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 04:20:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4dcff9-183d\"\r\nexpires: Fri, 25 Sep 2026 13:57:11 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2BzvGqwZ%2F%2B%2FHnTa9pjbZPLMsKgl8AewqL7zZvPoq%2BAbzkiqLdepbjYz3r%2BdnZMwGlv5GyTSzVQeeF%2FzOuY%2BHtPfJUFpgoo5X0XQ4MSId1H2ZaaVAkrHJH4gBLQ7%2Bn3Bn\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a40a87de9d1aa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6205,"size_decoded":1692,"mime_type":"text/css","magic":"ASCII text, with very long lines (6205), with no line terminators","md5":"05aea4827154a2764e8093082517581e","sha1":"00c378b230ce63ab6952b700a223771eea06ce70","sha256":"d09036183130d96fa0dcab54255f6381e075338bd3cb24d14c1e5ef00efc0ea0","sha512":"8b84fa37d5728fa580713d3c41401b7612215dd23725cc08a8719f695d99598fe918aedb93d52242a75bd7d8162570d4ef6b46571cf6eaae916675e2c32bbd86","ssdeep":"192:QjHXN5HjRHJNnHKDHJXHasHyBj8nHBH8bN3HDUqrmniClPzoSOIQWMuFuXuPhg7a:QTdtjVTHKzJXawyBEle3nGAlGAglh","tlshash":"1ad1d2a7a901bd75379fe184bc0735e9bc1ae035bb05093558990b0cc7da8ca71a3f2e","first_seen":"2026-03-10T13:15:23.31679Z","last_seen":"2026-09-25T15:31:27.462803Z","times_seen":3524,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/canvahom-08.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.881Z","timestamp":1790344569881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/canvahom-08.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc5-6a5f\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=toUeeB4SiDLH%2BYwa8Cc4OVzxpcpIBi3aX5TEdihlTQeJ1KCz8ckG1TtGJ6uMwnxAtiuyIS6h%2B%2BYVVIFuwNs4S8XK79dfCt1kmG2xvkzqDgPG7HqWytfIa6sfgKcWVIx2\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9cc73a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27231,"size_decoded":27912,"mime_type":"image/png","magic":"PNG image data, 342 x 257, 8-bit colormap, non-interlaced","md5":"8f2c477b3805057578abfe182c2a5f99","sha1":"f8aaac04cb65a31ba23eeb92d917f46f6d24f52e","sha256":"78844802650eeb24c9329328e62ccce7024f30caa22bcb16c645de31ffcdb5bb","sha512":"51f8bc96e6e94f80f196c00950c2fe5c5072ac6d3796fdf83281a78232c3a998a7a9a1475b66f2c0834d0527bf0880470305247464df9fa468a949fb2393258e","ssdeep":"768:5WKgDEFAEU041nqdcLmpemJ1WzTWFa2/5JphU8Qa:5WKggUpnqdcCXUuU8V","tlshash":"70c2e1a5c773ec4ae952235e56514f1760eeedb0dc0f3a790898f5bd0eba00c2ad51e8","first_seen":"2026-09-25T13:57:02.883871Z","last_seen":"2026-09-25T14:00:06.778636Z","times_seen":2,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":854,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-01.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.890Z","timestamp":1790344569890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-01.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc2-d28\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vxiko0jpwWYXOIM%2FrO9DWF5G%2B2QJM3ZLDWsZncMXQ4NctqjUXakehVUwIoJOhoA8%2BeFsBQ%2BMKEpdnaXwcVsSw43Fy1wEILELLnTj99SbfeCfSyrbbkgqRXX9o0yPT8wo\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9dc80a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3368,"size_decoded":4165,"mime_type":"image/png","magic":"PNG image data, 393 x 196, 8-bit colormap, non-interlaced","md5":"ea423130cf2d6a25216ea7cb23ad1fdd","sha1":"d0dd86bee80970cf5c88e813a9e0db1e06a07719","sha256":"8a6d6eba5b88d68182dd7a9c587b2ae55c8c7551a72f86f9a0f8c77e93180549","sha512":"5696dd28cb7c9a11ab0eede0ed5e24e7c7562a1d1e43b06469626002209928982d05e1ec0bce4cb06d8baaaaadbe2354f8fb6b1a77b3c9758785960dcbe7d052","ssdeep":"","tlshash":"97618e423b3252d546fa5653c4e454f7c533fbbcd40baac377f888201d6099b7414ac8","first_seen":"2026-09-25T13:57:02.884922Z","last_seen":"2026-09-25T14:00:06.74616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/script.js","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:10.715Z","timestamp":1790344570715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4EaJFXnpKEmLWmnVg64FRuffgRA%2Bnpi40OMybBTkt%2BCCZm3obtBRaOxei1vqB%2B6JzsS9GTER%2F%2F2RwKE4eJy%2BvoA7EU1vbtB%2BF9QDmA7AWn%2BUl1%2F8CWG43Nb84bP6QcG\"}]}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=0\r\ncf-ray: a40a87defd26a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":757,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-25T16:26:26.128283Z","times_seen":562736,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/bnCanvaHo0001-5_6_11zon-scaled.webp","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.854Z","timestamp":1790344569854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/bnCanvaHo0001-5_6_11zon-scaled.webp HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 25 Jun 2026 02:52:33 GMT\r\netag: \"6a3c97f1-3464c\"\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2F8whCjP7210KY5g7z7UX0jdEcSrqKk6danM%2BdfEIkSD0dx91OQ0qqv0D4thazK2TjR6%2FRtGUdvKYop0n0i8gSxKD5NFwdMbbJqHkTQB6gAX8U%2BJKtzzOSq%2BGUEU5b55\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=0\r\ncf-ray: a40a87d99c58a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 214604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214604,"size_decoded":215332,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2560x1207, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e23ba9d719d1313f66d02ce552353f47","sha1":"c00ddae0753be79e54f2c7b0859f9b515329103b","sha256":"c7c7432ad96f40400b305efd02d53d79b19463acb74bfb0f2e2a3f73fe09ae61","sha512":"4c620cc258fc288df5276cb2ebb502d0ad703c05eb38bd8f05489fb788c322878227d1b23766db1c81cbf4c0c43b06c4c283b83f5e17e39e29c25816a819a33d","ssdeep":"6144:AJhmvy3YhdB49Lkw/58QCpByUhuLYou3sMjiu3xMYM:ArmDdBbwB3C6auka9u3hM","tlshash":"7a2412fe2b89d17ce3e14cd194790be191de6d9ddc8c82b44c6e2f504683aa71992bf0","first_seen":"2026-09-25T13:57:02.885754Z","last_seen":"2026-09-25T14:00:06.749217Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":886,"receive":621,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/script.js","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.863Z","timestamp":1790344569863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=elYZckgUk63%2BvbsTTN247a5svV2en4Z5jc7oihCxdJ1pPpzG4T7muO8vhEXO%2BcGpwPEGE%2BXonS86gjR0Dm9Q4d9ZCPRi9pdB2WjvJZG%2B0466SlvlVBbAD9i9DITfE%2BGb\"}]}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=0\r\ncf-ray: a40a87d9ac60a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":742,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-25T16:26:26.128283Z","times_seen":562736,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/icon-ai-1.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.873Z","timestamp":1790344569873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/icon-ai-1.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 04:13:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3caadd-93c\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KtjIg8sp397ZkWnucQERrNvLnyisYvJ2P%2BbzTz%2FvBR62xv6RmCVMladyeDMD32mrQVdGxQgVbWY8jY5klK21%2BN0dwQg81AAO%2BSBSu2FMpaj5k9CRIpcG7uPnypRDbKP4\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9bc6ca41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2364,"size_decoded":3153,"mime_type":"image/png","magic":"PNG image data, 72 x 60, 8-bit colormap, non-interlaced","md5":"518b2e4412c716437c11392a9e80632e","sha1":"0f63a42859e7f1b5e41c8e988b4652409f0e16d0","sha256":"929601c5f902b2aad2ec44e70f55169762aca7d4d3399ebe93356e95c7d4031e","sha512":"106738b4670195c1bb359723b04ffbf51df06ab917cfd5d88816158b750459664228ab95054df1d39038c7f552a7c2a610fd6dc3fda9cabd42dbed8e4422842a","ssdeep":"","tlshash":"c0414d3916f6183d3c110d66edfcbc10a70d8f98db96b022d843b86f6d324c5c499202","first_seen":"2026-09-25T13:57:02.886898Z","last_seen":"2026-09-25T14:00:06.742182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/657867678.jpg","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.875Z","timestamp":1790344569875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/657867678.jpg HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 25 Jun 2026 03:21:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9ea9-4caf9\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVjrTEPGEV%2Fa8BireZ8PWnSvCEY8nYAV6h1vzK5e8ziHkhDD46qfT7D0yQbGjO8ZYkMiMBn8DACKnKDhMGp23pZAKQVac4dp6TS1gSW5LRKShbM0BBcUZ4ZdBLFyn8Ph\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9bc6ea41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":314105,"size_decoded":310316,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2160x926, components 3","md5":"2bd58d4210db4df2a8e14fbbc7d1d15b","sha1":"a62cb23249f8b758f1a12b09ca5673c85a826a74","sha256":"220468aab9d93ab9eb0262eab16821a03227647e2006bb6518e4336689c1fe45","sha512":"7666c9b284b20383f50f6b5440b11c11392dc50bd1b8cdf71dc6dbee6869223d4863bb21b785f7a8607e7fd53e4fbbe8f34d9658354549288f27e4f7a6dacd28","ssdeep":"6144:5X512VyG7BArjA8P3HgqaJK7QbNHKqWbKNrmnWaQbszAJ8hHtG:X1Kr7BA4f740RKL0qnNQbsk8t8","tlshash":"e264234aea712b4d971e6837c03858912f5bb2a4831df056f70aedcaaddb394374481f","first_seen":"2026-09-25T13:57:02.887796Z","last_seen":"2026-09-25T14:00:06.774977Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":867,"receive":661,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-03.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.891Z","timestamp":1790344569891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-03.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc1-d96\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbfdpDiu8lCCYHEBMK01fTv0%2BcQNuNWLfyoJ%2Bvg4pU2Vfq0D8%2FyxVCvJ75VJYQBG8q1egZZF4%2B3QLACSvrLb9VfjzofCaO2i8rMIdYLpIqgDKk91Y8uB9fedQqLYpV0w\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9dc82a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3478,"size_decoded":4286,"mime_type":"image/png","magic":"PNG image data, 289 x 232, 8-bit colormap, non-interlaced","md5":"ee623a393ce03aae317408b6450c9cec","sha1":"be8a4200fe612f8838467fed6ce2ad413f16589e","sha256":"d3e20dae71a5c0b5765f03049a9b8ea1a40cd7721dc54146aa8951e439deb1aa","sha512":"48352120fe7619e3821fdb3227c4dcbb64e837eee38083c25f201ed786666159873edb9f9b626f1d028845d775e708e684356c3a0f75b7aa70aab4e98c5e3b42","ssdeep":"","tlshash":"36714bf3390aa062e7a0533793784d10e13702e75f75007ec280a8da78e9b61ac03c43","first_seen":"2026-09-25T13:57:02.888747Z","last_seen":"2026-09-25T14:00:06.770151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/cus-12.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.902Z","timestamp":1790344569902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cus-12.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jun 2026 03:13:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c9cc3-cb7\"\r\nexpires: Fri, 25 Sep 2026 13:57:10 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgrMuNNc2rtZoaKtx5L6lK4GFL%2Fa082l8cq%2FuI06v1aT8UE9bFKNrzoExxFFc18eNrd7wogWIV66afoDNjkZurJ6UWnd0Pf%2FQMEl2d2pzsoV4tByU4SSLsa03%2BM4AzCU\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a40a87d9ec8ea41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3255,"size_decoded":4063,"mime_type":"image/png","magic":"PNG image data, 488 x 91, 8-bit colormap, non-interlaced","md5":"8c183ebf91cfa8a608b7eb0c65d320b7","sha1":"ccbff711f04a885e899511d996a3137ee4e565c1","sha256":"71d2125880b065e9c309d8cae0c5c80a8e39c5d2551c1539ef40619786b39168","sha512":"d152efaf8318e41747ec37791d3e4eea579e02545e5550950ae9e892ba1d846760dbf088b3d2ea8cb15d3fd0099a4ad3c2904d46ac308793ca4c9c4303189b8f","ssdeep":"","tlshash":"55615cf42221311f17f798a1b4abfbebd56e931c0ec00c50298151395dfe699c4e9f2a","first_seen":"2026-09-25T13:57:02.889647Z","last_seen":"2026-09-25T14:00:06.755105Z","times_seen":2,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/06/bnCanvaHo0001-3_4_11zon-scaled.webp","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:09.841Z","timestamp":1790344569841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/bnCanvaHo0001-3_4_11zon-scaled.webp HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:10 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 25 Jun 2026 02:52:56 GMT\r\netag: \"6a3c9808-305e6\"\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fKr4tIJ2AKTY3cnKK%2FzmONJHaKMULs4JbOD6aFKbThcynMP%2FHvUnXKEj%2FzH5lSYxAKrUkKEBHu5QUQpW366jMuvvsZODi52sXqayKtTIGCqt3uQYaf2vEqNwmtwzjJpp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=0\r\ncf-ray: a40a87d98c4fa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 198118\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":198118,"size_decoded":198842,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2560x1207, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa02327fb17861fd451fd82f0e2e4c89","sha1":"aed7e3b3eed9a7e92a08f4048d22e20636c47b07","sha256":"7a7bb4c873f745c8d1c8d4235440c8c6179b978cbd8575a97e2ad61f237000db","sha512":"29ade6434ed0bb15fcb93f573f3a82343f51a2aa0310c1ed39308888b3426c05ef342d494182128f6c887c860bb6422977f6864afabb90a50364d265838db0b6","ssdeep":"6144:Wtn123dD28QtHWW3655vUds6Vmg/vKduYE:lDBUHY59/FgEE","tlshash":"ca1422793936d30d92bd7200bc12ee4f40f9baa6abd32c3e5d807c59d5b951f66400ba","first_seen":"2026-09-25T13:57:02.89049Z","last_seen":"2026-09-25T14:00:06.741114Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":850,"receive":486,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canvathai.net/wp-content/uploads/2026/07/cropped-imgi_47_canva-icon-logo-symbol-free-png-1-1-1-192x192.png","fqdn":"canvathai.net","domain":"canvathai.net","tld":"net"},"ip":{"addr":"172.67.161.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://canvathai.net/","date":"2026-09-25T13:56:11.688Z","timestamp":1790344571688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvathai.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:39:14 GMT","end":"Wed, 04 Nov 2026 15:38:54 GMT"},"fingerprint":{"sha1":"2B:BE:40:9A:43:8E:B6:A2:8D:96:16:89:1A:F7:02:8C:6A:0C:8E:73","sha256":"09:02:54:EB:53:76:0D:6C:93:16:D7:1B:21:DC:17:CD:8F:06:D2:8E:2A:32:D9:43:C5:E7:0F:7C:F8:99:EC:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/cropped-imgi_47_canva-icon-logo-symbol-free-png-1-1-1-192x192.png HTTP/1.1\r\nHost: canvathai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://canvathai.net/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-25%2013%3A56%3A10%7C%7C%7Cep%3Dhttps%3A%2F%2Fcanvathai.net%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-25%2013%3A56%3A10%7C%7C%7Cep%3Dhttps%3A%2F%2Fcanvathai.net%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fcanvathai.net%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 13:56:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Jul 2026 09:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a477c66-4e56\"\r\nexpires: Fri, 25 Sep 2026 13:57:11 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yIYrZdDZ1QuR7rv1gtAaQ39ZmZ%2FZCtYNdyR4%2Fp%2BBest2%2BFAnCDZ1VpMdPcry2Nq9ZF1XEf36cha6TkTz1OTKuCMrVlDP18ULAc2NUwreI4b%2BO4cEiFJQ9xsI6%2FDjTD9R\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a40a87e51de5a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20054,"size_decoded":20870,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"e2e17771247edf66c4de176dafc1956f","sha1":"617782bbd910e015e23055b038a6b813bb13066a","sha256":"a9ce52162f894e5c249de497aa604a28494c9c3873451746cbe96c871453e852","sha512":"6c20173833a0ec86356435d8446c4f4282fd3df14469426d538da7434c273734466fa2ae4c672e73b018b31aae56144b01ae381d10e516acba72f31f88918e08","ssdeep":"384:S5tC8cKunkwc5G8p0KpqCsLg810zxtiaulyiuwLRB1Qa3wUs:SeHX9/G2LLeznYlo4R4a3w9","tlshash":"d292e124f81915fcfabbe74ad365a9a04a526ff3b2681a4f27c524b78303177411c8a8","first_seen":"2026-07-10T16:17:27.505534Z","last_seen":"2026-09-25T14:00:06.787507Z","times_seen":3,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"canvathai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"canvathai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}