{"report_id":"5e105061-54f6-4ad5-b5d9-238887caaa76","version":6,"status":"done","tags":[],"date":"2025-12-13T14:03:38Z","url":{"schema":"http","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"title":"تحميل برامج كاملة وويندوز وأوفيس مع التفعيل | فارس الاسطوانات","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-17T14:03:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.farescd.com","ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-08-09","domain_rank":1272233,"first_seen":"2025-08-14T05:15:30.434452Z","last_seen":"2025-11-22T14:03:37.169917Z","alert_count":140,"request_count":140,"received_data":8825793,"sent_data":74067,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"JetEngine","description":"JetEngine is a content plugin for WordPress that allows users to create custom post types, taxonomies, and meta boxes, offering flexibility in building complex websites without requiring coding skills.","website":"https://crocoblock.com/plugins/jetengine","common_platform_enumeration":"","icon":"JetEngine.svg","categories":["WordPress plugins"]},{"name":"Elementor Addon Elements:1.0","description":"Widgets and extensions to extend the Elementor Page Builder.","website":"https://wordpress.org/plugins/addon-elements-for-elementor-page-builder","common_platform_enumeration":"","icon":"Elementor Addon Elements.png","categories":["Widgets","WordPress plugins"]},{"name":"MonsterInsights:9.10.0","description":"MonsterInsights is the most popular Google Analytics plugin for WordPress.","website":"https://www.monsterinsights.com","common_platform_enumeration":"","icon":"MonsterInsights.png","categories":["WordPress plugins","Analytics"]},{"name":"Funding Choices","description":"Funding Choices is a messaging tool that can help you comply with the EU General Data Protection Regulation (GDPR), and recover lost revenue from ad blocking users.","website":"https://developers.google.com/funding-choices","common_platform_enumeration":"","icon":"Google.svg","categories":["Cookie compliance"]},{"name":"Premio Chaty","description":"Chat with your website visitors via their favorite channels with Chaty by Premio.","website":"https://premio.io/downloads/chaty","common_platform_enumeration":"","icon":"Premio.png","categories":["WordPress plugins"]},{"name":"Elementor:3.34.0","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Chosen:1.8.7","description":"Chosen is a jQuery plugin that makes long, unwieldy select boxes much more user-friendly.","website":"https://harvesthq.github.io/chosen/","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Underscore.js:1.13.7","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Site Kit:1.167.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"imagesLoaded:6.9","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-07T22:17:02.440237Z","alert_count":0,"request_count":1,"received_data":2476,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fundingchoicesmessages.google.com","ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":4438,"first_seen":"2019-01-16T15:59:52Z","last_seen":"2025-12-08T14:18:32.927992Z","alert_count":0,"request_count":5,"received_data":238077,"sent_data":3358,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-07T22:16:37.28363Z","alert_count":0,"request_count":3,"received_data":761980,"sent_data":1642,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-07T22:13:56.807982Z","alert_count":0,"request_count":2,"received_data":29976,"sent_data":1136,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stats.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22660,"first_seen":"2017-01-30T05:06:59Z","last_seen":"2025-12-07T22:49:33.34811Z","alert_count":0,"request_count":1,"received_data":4265,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pixel.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22824,"first_seen":"2017-01-30T05:31:40Z","last_seen":"2025-12-07T22:52:48.511671Z","alert_count":0,"request_count":1,"received_data":251,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.farescd.com/_/mss/boq-content-ads-contributor/_/js/k=boq-content-ads-contributor.ContributorServingResponseClientJs.en_US.sChNH5Osak0.es5.O/d=1/rs=AJlcJMz7a3Aoypzl3FteasZliPsUtk5MMw/m=kernel_loader,loader_js_executable","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6236e2f3d3af024fb508ec76383d73d","sha1":"de9541e00ab860c904e618d24d878df6a9e31f5d","sha256":"30e3027dd26b274c39fe3be1725470eb06521c9ab757da77fda00cbb26fcdba1","sha512":"4692182b205c9b7704e279ff04954f3ca835b527430b3d48d8df40dcfa060153568209b6d5567c36e188921869fdf1c6525b61e3aac0278be546401ae44ac5c1","ssdeep":"3072:Fd045qrKQiH2BV7lvDzlVoXmUjk5jIS9kB8gBSk5Drd44Wplm:Fd04obvDJVoXdk5jI7BUk5Drd44Wplm","tlshash":"1324949872d2b4a6a263f8b5402f400ab17f68a3e44d8c6cb2a5ddd17ef04499137f7d","size":220479,"data":"","first_seen":"2025-12-13T14:03:51.752465Z","last_seen":"2025-12-13T14:03:51.752465Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/astra-flexibility-js-after","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5abb63f68da2923e294ae1bd22d1c255","sha1":"7a3079d6c0070fa5711e73d79885f17d03269fa5","sha256":"1e8dd44bab15ee5ead8b1d7de0a1f3800c94988218b1b891d974eca1cdf80aa1","sha512":"d369d5b889b2fe064b2379f0416e05ef5ee0db09559fefacc7f2636183305bc7ea1694628453ebf6444a886380ebdfe040514917d70fa516b721e2eb0e21f4f9","ssdeep":"","tlshash":"c0f01270c18055160497057e6463910a5410d400d4733008800cc30c0432dc01ca0bcd","size":518,"data":"","first_seen":"2025-12-13T14:03:51.782321Z","last_seen":"2025-12-13T14:03:51.782321Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/imagesloaded.min.js?ver=6.9","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-04-03T22:31:34.369876Z","times_seen":147260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/eae-main-js-extra","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6d779fd66776c70dd6fb4ca70db8eab","sha1":"ce4f3be773e1752b11e851b1e81c2b804f37a908","sha256":"8501f03a914a5c3a1c43b4321b8a65fc2300be451db7cf6e711e394333e6eacd","sha512":"3703032a50311e749d157544ebdc95693011b5aa5ebedd37878af53915d91d9d13bd92eede0f68ebfb0398340dea0e85eb389cdfa1982eb3eeb4af97a7b15014","ssdeep":"","tlshash":"0541abbbfa090d83033c4ff520347baa407b52a6c1a0bdc0c71ae42c06689e1a18700e","size":2108,"data":"","first_seen":"2025-12-13T14:03:51.783009Z","last_seen":"2025-12-13T14:03:51.783009Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/underscore.min.js?ver=1.13.7","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","size":18905,"data":"","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-04-03T22:32:40.117529Z","times_seen":89523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-04-03T22:32:40.105836Z","times_seen":61879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/elementor-frontend-js-extra","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2dfbb548e2d1d0e4bd46581dc2c8944","sha1":"62f71279979c5e41b5e724ab5a64ebe76999b748","sha256":"e5b8e3730c4f1b9e02865d361b880fec8a9d7b9a09ee51f47069eb37ef00eb39","sha512":"a9324a21e5e219dcdda16a946b3356487cf63dda2128e937658f8e14f766a093e4365666b02808e81cd91ad229cb7cac708e8085dccf63d1e53a13bfb31a9c17","ssdeep":"","tlshash":"4351eb3be94b09811f7da3f724673b89c5ae47d3d485d2a8f116549c55a0df053ba014","size":2859,"data":"","first_seen":"2025-12-13T14:03:51.783802Z","last_seen":"2025-12-13T14:03:51.783802Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/astra-addon/astra-addon-690ca36ff2bf18-64255863.js?ver=4.11.11","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ed787a6c2405c65ec11bdcf4b1254ee","sha1":"a422d3cddf24a0e43ea6b64d06371cf7204ad816","sha256":"968181dee033601b0cad6f2c58046d55b314e2013f8fe61ad8cd593793e04d8f","sha512":"76ad544b6cffb9530b393a3c0587f14104d09c972c132f5ac00dd2a81d2dbbeac38a3469d8bf0e1b1bdf2a4417fe5ea05b00de1bfb3281e97e6dae7c8615ba02","ssdeep":"192:taJI2Ic4uAurl8pyE5Iy3yCrtMLlzZpD7G77psPVkr9LLE3XxSkWkDx5WijTEDxe:taJI2Ic4uAuripyE5V3yCrtslzXD7G7g","tlshash":"4632a5b52318713700bb1babf4ab5bc8b6b115afe94d0401756ecc1e58e8f8350a1eb9","size":11201,"data":"","first_seen":"2025-09-19T04:50:12.757399Z","last_seen":"2026-04-03T07:15:10.206022Z","times_seen":430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/jetpack-stats-js-before","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b0ef6cfdea66075ceb255114b1edfce","sha1":"45e6148e76d7403124b5c85430931e0cd7001404","sha256":"d5f0cadc68e19ec81d4bcebe0799fc69a27bd09bda97a44dfb2608d440298dab","sha512":"3270978e310b848324d38791bacb664da20169167a3152521d0cf1cc0e134c98858d0c95db743af182145beb1e89c9a4af8f43efff80e1e36db9ea2e079f7469","ssdeep":"","tlshash":"de412b69c2e8c47cc9b61eb83278ce2150c91027c02449a9874ae878583c2b75a63000","size":2061,"data":"","first_seen":"2025-12-13T14:03:51.784652Z","last_seen":"2025-12-13T14:03:51.784652Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4070f376588c83fe1670fe61b4d32c91","sha1":"49b7a216638206df201e4219a3929a3d0094c5e1","sha256":"c83f2c6c9de2fe79242561c787b603be0150004f0c41a2bf9cecb1d573e4a7da","sha512":"4d19e0eb601cf471c28e88f15a5808409a6afb241526191280d96af0530e55f8f9d8968347eaf78e2e4757990defc88aa64b2b718ba17579046947ebfa749ad4","ssdeep":"96:Fg7ov8u2sB99QzSIQZTqFln/aE6QHilfxaqzk6XnPoLSNp:FklSczSIQg7/6dDaH6/oL8p","tlshash":"a7d11fc0e7dd50975aa5318d4c3e29ece03c56b238045cb7fd48fa644965c2e834eb7a","size":6650,"data":"","first_seen":"2025-12-13T14:03:51.785652Z","last_seen":"2025-12-13T14:03:51.785652Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d7432543e755e52d556c531ec9886f4","sha1":"d5a3e53a8fdbcd624fdf53ef89dc759ad9734dd0","sha256":"3f0e896a7089d518e75c207fb23eb3af295005b900d2ad7ee86e898afa6b3739","sha512":"bd14c3e23c13b24760c20acbdd842757adf3f2af544e51b90c4851ca2ae2866f407908096837da127c884fb916fa17996c6fd38a661f242e250b0f393500ca8e","ssdeep":"","tlshash":"36e02074660a781a6821e0600f5ff763b5d591c0f30d14c3524cd558e84cc1360dddc7","size":344,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-03T20:06:44.617373Z","times_seen":15033,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-menu/assets/public/lib/vue/vue.min.js?ver=2.6.11","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c81f02ad0bf8e12a66c18cab188d029","sha1":"abd239f02966b2d324b0512c203bdbaf82a4ed7a","sha256":"9e0156dd49c03744e79bbea60eebbbb94b5811c1b71b91f5fb38a8270dedfbaf","sha512":"409b23dda7d6942a6743ad17cf3604f096f72201c82b505c199a31f6b51299146adce733f6f435c91f34797dbf6fd8dfc7f52e4f9cd858d76b33c4defde08c85","ssdeep":"1536:EUXY7qLtpHt2Pne1mZ8I6H82RaLPMBlo5VV2B/S/r:zYeJpN2vefKMBlmV00/r","tlshash":"979308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93670,"data":"","first_seen":"2023-03-07T01:11:55Z","last_seen":"2026-04-03T21:25:08.010453Z","times_seen":9476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.min.js?ver=2.4.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c72f588d7841d08871f6f57b4bef5822","sha1":"70e2ebaf419db6a336494abaadb97a63092a4a8a","sha256":"f429d68fdbafa7014fe049bcae44fdec1e4cdd61c9de788b79c1b0bb57999188","sha512":"8d6fbe7d0e1b9b6c98c8970fe3f408e180b609119801ef06292fd00e54873a3f8819ccec1c5a8efe7f9e6a7266abc8f7f384937fd070686458a6dfd0cd33b29e","ssdeep":"192:VGsTXXwzaX5BXK3gletr+YMC9wqBxFIGxKL8xsktddyKqJ:Vq3uyaYJwcxFDxK0sktdsKY","tlshash":"a6128686f291a54901df51b2817ef20a5b72a1447d23e12c7df9dacbdc24ecc6123af4","size":9914,"data":"","first_seen":"2023-03-07T01:17:48Z","last_seen":"2026-04-03T21:25:08.023834Z","times_seen":3153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/rocket_lazyload_css-js-after","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"70f0c5b8c66e93d0d1df95e18c6626f3","sha1":"2cefd3934fabaad26ba2199849a19b5e0bb2dd7f","sha256":"4e370de312cf700eebec8feed0ff740656acaeee93714b3d2c525d6d119074ed","sha512":"05838f7ca7b3e54a9bf16039bbc5ff197b59dddcf22eb5a175433eaff3747e50829d9fc2450b53f58a2693151b5db7128a35960412db7a03bb55d327abc42a90","ssdeep":"","tlshash":"e17131a6f0fe70b7ba6f00b68037c286f430a63bfa4d4051e15d94ba2cb8c594453967","size":3496,"data":"","first_seen":"2025-12-13T14:03:51.786965Z","last_seen":"2026-03-25T14:07:38.777806Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/astra-addon-js-js-extra","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d40f0b8e73845b77ca2d6df004ee35fa","sha1":"7ae59db468cc5a91d03be9383b9e571567864f05","sha256":"969f23608e99f63ad1bdaeb07f4bd969d1991eacc75be72eada3eea733c4b261","sha512":"e47f020b70d7f50a237901bbb363592be013b0ab81c5e766640cc1b4e75021dbb7451d87a366ee6c42fb1245cc4535002b8b741edb3c41e628bd4beaa3d1e6da","ssdeep":"","tlshash":"75515b0cc2f6eb9a199293b7df60894f65277d9ce9f68034fe5d8a15432e2e134400a8","size":2746,"data":"","first_seen":"2025-12-13T14:03:51.787988Z","last_seen":"2025-12-13T14:03:51.787988Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/elementor-frontend-js-before","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"684939571b6af5a6b8cc26134bfd9489","sha1":"6fc5fc52e3efd4a77f59d0ffdb24c8b373f1272f","sha256":"2c793d1057441ee082980253d2110246bebe9d9ef0ea31d2379b561d3834a2aa","sha512":"9c3219ede0eb0e45593960cfe9490d1ba1ed843d702e600631048f14f98daa2777e22a2b4cf4da9462ad5c513a8cbc2843baca8c1220a1a0ce1e9ed87f7074ed","ssdeep":"96:S5qPkG5UUeX4JwJ8DMlR7RiVymnSoKc8s:oqPXUUP8aOR7pmbJ","tlshash":"8db130c0f759a97f05628b70bc36ff29186c0da5c821a475bb6c26d8017651b370bbc7","size":5485,"data":"","first_seen":"2025-12-13T14:03:51.788814Z","last_seen":"2025-12-13T14:03:51.788814Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","size":1499,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-04-03T22:26:48.204212Z","times_seen":63499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/chaty/js/cht-front-script.min.js?ver=3.5.01692173004","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e8fc11b9f5a4a074e696f4464342a34","sha1":"ac47a68750a64907beef8fed9bb21dff14722498","sha256":"8b4fc77720f9ad21c6d55ce9fbff438bcbe55aee69ffe18351b5c6df13ec380d","sha512":"c04d988a531f21676ce4899438917ca879c429d43bec7c3fc8e3ff757ab88ee558a4aa22c18cf7e4d10c5a8d821dc235bfb3063bad5687825adcfed4414255da","ssdeep":"1536:pmuxWOBvYmFRWMDZKk61S4WySb0SK91a+Ua2c7kQAd928kAFUUSY3wYSGPuT8Eud:TxWOBvYmFRWMDZKk6IySbdd928lc5kAq","tlshash":"2293db51e214a4be00ff136165fb7124113de1faec0489b165b9d1f8856acfef02afa6","size":95555,"data":"","first_seen":"2025-11-04T14:42:27.139276Z","last_seen":"2026-04-03T22:20:59.543118Z","times_seen":1812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2344c2369f3ae37fb5f28616b645dadc","sha1":"587fd3bbaadc6d023d1cf74c15073553765825d0","sha256":"9e28ccc0255eec86d4de746e8dfe9e7fa9bb5c0fae93fa0ee39670bd7734d974","sha512":"40d9ba9df5e81317d30cd0cea27dcc90ec42a3b181e1dd45dd7f9a5e8420f983425b6c090eb1f2cdfc37da341d42e208b3d957e7eeb8dfefd7628815058f46d1","ssdeep":"","tlshash":"a581b00924f7273022c798b57f8f90512852d52389d9c92cff0d26891fe81af2793bad","size":4036,"data":"","first_seen":"2024-03-27T00:13:04Z","last_seen":"2026-04-03T21:25:07.911164Z","times_seen":1825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/google_gtagjs-js-after","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9717b848b718520c1474bda05f6c7e58","sha1":"e5bc9142d23705b43ceb4aee90cfa8e785f2b61d","sha256":"d55214d49705767408a96b5cf34836447e0fcc30bc1b3fbfbd105f06c5d451c5","sha512":"3972711b696111cca0e512ae56c2ca1804cdba20ced9561ec59bd94e2adea44ed463af93cb2db501454fc0b5746ba7caf579d26ac285fdc2590761447e2a8a57","ssdeep":"","tlshash":"47012b6ce0935c7545bf19706b577b1271593302c2615d2088db5198013f9875996c84","size":724,"data":"","first_seen":"2025-12-13T14:03:51.789751Z","last_seen":"2025-12-13T14:03:51.789751Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/jet-search-js-extra","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc2fc816af82d7333eba38670dfff539","sha1":"1bd61d4cd326091e39bbea24c7f0b16e3191ce82","sha256":"6d97fc46ee6a44104d615fb89fc444df620094c74314d4f11b34934b1b9cf432","sha512":"39a75dec497ff21d452f76a643a7f190e637398f794577361746661177026fcfa98b5ca37d9bf15919491e0e390fac32f6d37d3f30069c874e2ef159843a71cf","ssdeep":"","tlshash":"a441f70ef8a09ff7233b97f02ca4bb5a48f65627e88066d0af57d49c1715dea8447241","size":2422,"data":"","first_seen":"2025-12-13T14:03:51.790503Z","last_seen":"2025-12-13T14:03:51.790503Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/rocket_lazyload_css-js-extra","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c8d846204b9f0bb8e7c0f115d6de1be","sha1":"47ebb41b8a898101f339f0421f6cffb98cb7d39e","sha256":"ceeecd9ee074a11e6702b843ca6d74a4f5b8627dcc19ead858ce3a92daa0f66a","sha512":"08efb8be9d0f49b3df0447a9527b91b365651048bbcb2c43484235312f0783d5726dd9196ac7c0b890fec4d4d4c58dd5737dfd60408d79012015635a6cc4ba79","ssdeep":"","tlshash":"c73112c1e0ac8b98fc761c30023041727045bd86d7315447e00c418c822250073a4113","size":1833,"data":"","first_seen":"2025-12-13T14:03:51.791269Z","last_seen":"2026-03-25T14:07:38.783219Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a757942f2d700b69e4871e170894dd7c","sha1":"ab8abf26f815934eaaa71d3a222e975424bba39e","sha256":"2303b0f4aeaa212f0240970f54282841981ec6aee01cd22e6445efad3bc3ed83","sha512":"1ab86b40b1643b56be5e7daa0cb4f67f607a786d1ccf28e6a72fd432d1714b8b73e63c7247e58aa28b9627295300f2377ebad07c9018becb1d1b0d4de024dc8b","ssdeep":"","tlshash":"eea01270018055160497050e646391095410940054733008800cc30c0432dc018a0bcd","size":81,"data":"","first_seen":"2025-12-03T04:13:05.665625Z","last_seen":"2026-04-03T21:36:03.916804Z","times_seen":4397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/wp-util.min.js?ver=6.9","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19d386c9004e54941c1cc61d357efa5d","sha1":"0a77594006c8d86fdcc0adbc2b9aecaef3869586","sha256":"3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95","sha512":"7811cf6babb4df41707f97d1bd65337b5ad7aaedff301fcedb90fb7773fa9876f52458aa03a576910f6126384599ef25f8de76ee309c22e1914d9cf444aefb6f","ssdeep":"","tlshash":"ed21795a7175a9f311333479c23f0207f332e4145a168951e489c4f19d70d8be5b7a19","size":1426,"data":"","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-04-03T22:32:40.089989Z","times_seen":97006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/jet-popup-frontend-js-extra","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f7dff184e3e2ebeea12d7ebf73511d4","sha1":"62e714c9e145d7ddfe3e3a0e145db058fbd28730","sha256":"f4bbd6a2cf1027193a5ad1c84e3802541d3422e688b4acac7c7c19c49730538e","sha512":"5415ebf688f6f1d8ad71d6b7845c5abcf39d32e40361feed797dce5a8632e8a3d3b761541d3fa2e37c9808db55f5e3fa021c4f85ba6b05ff4b26ec40913ae226","ssdeep":"","tlshash":"87418059d4c4eb5745eecff01c146b7641751151d550cd55954e54c80170ed6dd58106","size":1937,"data":"","first_seen":"2025-12-13T14:03:51.792581Z","last_seen":"2025-12-13T14:03:51.792581Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/jet-menu-public-scripts-js-extra","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"875557a928ca8701e4bf41c88d2c8dac","sha1":"e7da4867405c054c004dcce7c615be6b68e25f9c","sha256":"f74243d2f5ee32943811fc1668be6db2ee9fe435bfe25ee59b68303e695e3920","sha512":"7c775348be8ac0ea40c65e1137a0202d30528a093a876eec4a295332a6e52f2202e63df17de969b78e2fca498cf9a0201b472dd99c3b76e964a38e2b6e97b509","ssdeep":"","tlshash":"d95170cde9945dba0bdd73f00754d37d43e68d67cac48a9595a1cd6c0ab5d9733c0200","size":2488,"data":"","first_seen":"2025-12-13T14:03:51.793611Z","last_seen":"2025-12-13T14:03:51.793611Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.33.2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","size":3721,"data":"","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-04-03T22:32:40.202467Z","times_seen":44394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-03T22:31:12.915101Z","times_seen":637585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.min.js?ver=2.0.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"840bc5b942ea05522bf35feb8ade5378","sha1":"fb7eb0d722a1ad0e9565900e7b78a47d9d0a8ce9","sha256":"3b8a7ce918988d5ab64c2a26b6a87a9e08e2f08fbe4e7c20a3a98bc10d264945","sha512":"32c9433ee62100a3fd988bd99d991ecb3afd4c916447733541f17d874562f87f3469ef1b7a641e439ed8b68cebb0c174d43a95ac7ff15ded451c1834a566e30c","ssdeep":"384:xfJQ/vWKyCN3yHEPepmc1enbAMJOZzb7b:tafgMOZzb7b","tlshash":"b2a2b44d33f73e77339a72e04bece1128b74a4d2399b04b0f93c667da5255a601de6a0","size":22668,"data":"","first_seen":"2025-09-28T21:35:49.152141Z","last_seen":"2026-04-03T21:25:08.016683Z","times_seen":375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-menu/assets/public/js/jet-menu-public-scripts.js?ver=2.4.18","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb387604d2db70a862d4087108d1f0da","sha1":"aff5d915aafdb23e3ac18b4a217698547973b971","sha256":"7d9e6cb1e0564d0d2e07bfb2c7e876b3c364b0eb3de19288edfe26465b62b3d9","sha512":"f2b2e439b8ba76820680fdde6500fb892e468245a5f23a8dda465405ff0fe0a7a7ca98fac75fd146c3bbb094817b7be71d8fc1a54099fbbd4e9861c7c655c07a","ssdeep":"768:mAWeIcBhjrPDIWCB5ajxDwnPtdAfQZMgxySz1qjbn6P1uEQ90M09H0G/ljsQFWj8:mA53cTHuGKCf2GFm6AKfbiBdUTlt","tlshash":"6ff2b5517205316807ef51fdd2162329bb732581a046e43db8b8adcaecf684a71e77bc","size":35425,"data":"","first_seen":"2025-12-09T13:52:02.155379Z","last_seen":"2026-04-03T22:13:31.527798Z","times_seen":341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb15a10a641a318f91e7e912e4f9c184","sha1":"bd41f67233facb96976ed7b8e7207d52c03d340e","sha256":"f40767552e5e94b2d5f9a65d7f640cfa7d225298023dbd682095e040809a3d1a","sha512":"49570d36e5b1ae3c3a4965f7d054258ff676326bee0d9399aa990926e9a762f699de1d09078debadc43b363ae51d740ba33f2e8c64bb223a73d3c62872ebb3d2","ssdeep":"192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY","tlshash":"b60233487946746b3973f0f6218f02ca353a24426ced6854a6e1f8e82d7858d1463f7d","size":8892,"data":"","first_seen":"2023-03-07T01:19:39Z","last_seen":"2026-04-03T22:36:24.518877Z","times_seen":50639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-util-js-extra","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e7eff87b3fdc1403d76326a74241bd7","sha1":"f45bbbb2d5359197f760d2eb601ff0d9c6ac806d","sha256":"1ea2586aa5cc8c9d39447d8a826d097e9efaf86b029c4a1fea7bfa1323f2e49e","sha512":"4941a1fae0eba0883ebfee4ee6e2a7f4d92faf011b07957b1cddcd3e44ffe7b3ea291b7b1e19e731e8d08def2527eff61c907e607f02498ab94ec7b50adecdae","ssdeep":"","tlshash":"653112ddf8aa2f5ba3ce5df6541ea37b2460f551d0554c0527c691610120c85df48401","size":1797,"data":"","first_seen":"2025-12-13T14:03:51.794366Z","last_seen":"2025-12-13T14:03:51.794366Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/rocket-browser-checker-js-after","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"10f89265131c8e02d4616785b62aa552","sha1":"f5aa1ab794873af927d66a873662721bf7385088","sha256":"a16ee6daf1bf2879e2b66fe2e7d0501aa75ffc967f25880124a8215bc37be0f0","sha512":"63417c05cdab90d45cad7f018b2cad5bea5fdadac053030aa1927af53c41831c8c1c0df80bc8de1b4f09f64a5c1b3b8e0f93bc9a46f6257b760dae6e932c5e59","ssdeep":"","tlshash":"d18195a8f83570a8a9f39036543b630371692661e1898090c2b1dad56cba7c2d3d7e09","size":3917,"data":"","first_seen":"2025-12-13T14:03:51.795229Z","last_seen":"2025-12-13T14:03:51.795229Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/starter-templates-zip-preview-js-extra","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"75931d9da2e8fc838976655572f8c308","sha1":"e4f51864ed6c98581415fc006c2180e5dfa5c803","sha256":"f87b39b13442c6d1e15269c1519625585b34f5a529c253913846528902ff05ab","sha512":"70b936fd81d2b8eff3d7a809c7008c8e48155db67c7513503dc0ef9d1e164b9903b4b9bbf7aea64f4d1864c0d8b3937b57521b4cb6cddd89e35d30744375ca04","ssdeep":"","tlshash":"e6419224f27419b2057389bdc51fc2a8949d6a43cd2ed709bd5dd96c21e675f0914703","size":2109,"data":"","first_seen":"2025-12-13T14:03:51.795999Z","last_seen":"2025-12-20T01:08:56.481382Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"73bb0bff1c233fcdab13e77322545137","sha1":"daef701227e53382273981d97b75c6f8f354a4b6","sha256":"1aa3ca1f93c4dd458f13d581d7f6e068f470600d474f4b3cf751c9d5fce829b6","sha512":"16817a2af7a8ee596e35eb9309786e976e16fb2f124951620159d5ee501c6b717143a7b5724a9d4d137843c8d5f04dddc2c5cb7d2dbfb1f1d22e0276f912f476","ssdeep":"","tlshash":"6cd02307d9d50c6e381c93dd79d9ec84e06e00c7700050a705ec3cef02e07140204c9f","size":227,"data":"","first_seen":"2025-10-24T18:33:48.610599Z","last_seen":"2025-12-13T14:03:51.796835Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b833b5777fbb5e049ef4673728735685","sha1":"d0ba39b24d4800d3b5af18deff5178a920e1ae3f","sha256":"9bf0c984bae5242e99aa4555cd791c5f9c06e8664f7e7efecb19b059b5827f3d","sha512":"8330785c2c1155e0b1fcfde9ff3a48f308c28a4d87c53e2babd52287367dadf8f0956ce694cea4c652d3c902eef2536612b322512d1891a74c6cc3c08dfe266a","ssdeep":"","tlshash":"33d0956c20935c7545ff19407f577f137119330242715d304cdb51d8013f9875596cc4","size":275,"data":"","first_seen":"2025-12-13T14:03:51.797805Z","last_seen":"2025-12-13T14:03:51.797805Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-search/assets/lib/chosen/chosen.jquery.min.js?ver=1.8.7","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e9f1dcb9cc75169765265133fb815a7","sha1":"7678293e0a0df6f57aea34e07b7e0392ebba2234","sha256":"73881513a7e7f8944a311bea8e80e9fad946e256ae74d62b5c8d469dc6df0186","sha512":"acc186178c20d51ef77a1b67c5706de666d47cdf49509c1b936d4a3259cb643261ec190f99ea2f06e75d64210d25d7476183240a1f613c59cf992f6cb29922f2","ssdeep":"768:+Otj9+umwo0XCITm9HNfhvwITdNWb0DvHrqgtV:+ORjgF9HNfh1TdNWb0DPugtV","tlshash":"8ad23188fab0a12041f795e5a65ba5c5f337a49ce80c89acf93dddd65868c0d702fb34","size":29121,"data":"","first_seen":"2023-03-07T01:07:22Z","last_seen":"2026-04-03T21:18:52.634173Z","times_seen":12499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.17","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","size":25965,"data":"","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-04-03T21:36:03.883106Z","times_seen":18069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eafaa0be830db11da3770638100b686f","sha1":"db325dc427493ed0c2988ef229573b7093425466","sha256":"96adbda6f380d09bfd780e4143e165a48037b43421d3964980a4343aedc644ab","sha512":"1e7154e54aae28ff4c7119b1a29fa83e8c294ed9f6aa4e361f6cb07c7c4e72c6544d2cc5f03ba3051ca5ba272b21e9a364e97fb2df0cb679eff469a17b49c299","ssdeep":"","tlshash":"21e065af25a56316d25df8b63035c6a87970115877811431a1bdc405a5eac03a985efd","size":429,"data":"","first_seen":"2023-03-07T14:02:48Z","last_seen":"2026-04-03T22:28:49.055868Z","times_seen":8423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-03T22:30:33.244237Z","times_seen":232868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-03T22:31:12.901944Z","times_seen":683995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.11.17","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","size":15525,"data":"","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-04-03T22:43:49.49286Z","times_seen":14410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.min.js?ver=1.14.4","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"26c498b0876f609720887d9651fa4122","sha1":"7eac0581622cabd86f49d3a22e67c0cb6e13354d","sha256":"285b57b8d0bd9182e9948c778b19823e4fbc5e51f3d10ad4624783bd16d6993b","sha512":"08fe1c369fe4d2d0e63bcd3c3685d45a886c490f10162daab6cde1f0798aee7efb4e2c732991b393e55cca39ca1f23ae2399111e7ca8303842f77b9ba2e5260c","ssdeep":"1536:LVT6t/OatHBaF3uwq0B5HHeqKAC8EMiEywgGQVULj0Zia5uLQhp6D8D:RDatHq+a+q0w0VULjG","tlshash":"635371a1302035f220af557f216b62983171ac7fd1064c98b07ac57d1fbeee12776b6a","size":66019,"data":"","first_seen":"2025-12-10T07:17:04.819046Z","last_seen":"2026-04-03T21:25:07.933971Z","times_seen":431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.min.js?ver=1.1.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d92d1d8e778aa3773e719bba09089942","sha1":"ff26dd2b05f2e5993490968d17801d91ad0f9761","sha256":"7586da6ec5a0e01eb5239aaac31dc3d411cae3090cce52a7e00efbda2f32c6bf","sha512":"a9e08b87563f8330e1128926473e953e507014f9dc60ce976c8fd44b7ccead956784286fe59ca1d24d0ddc5f5491281af55b0c065b5019e52944e7585eb7bb56","ssdeep":"384:b8TCK3oivAJhyEolRSQsRueeCC7EHaBo/ybDnLg0YE+BaFcXG3g4n:bGxd58EgHaBosLg4+wwO9n","tlshash":"6592e8a8f1a3b21383eb7568295f240c3bb2e912c90bc510765994a87dfce8d5127f7d","size":19887,"data":"","first_seen":"2023-03-07T01:17:48Z","last_seen":"2026-04-03T21:25:07.951647Z","times_seen":2373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-search/assets/lib/jet-plugins/jet-plugins.js?ver=1.0.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"271ad1f3a3e724e9f2620c09d616cb71","sha1":"699fad2ef3e754bce2ddc747e8666515401839cd","sha256":"d98bdd8d9c4da34ca6f4639dbccbfd3d45154788793091ef016384411c97759f","sha512":"6e41d37de824c5e0ef341fbc7afe3c896401965a806987a412c5b66aedd44f485929e8a85dc23b3028859094a903d93a752abfd51ec130fa7423a459ecb58cc9","ssdeep":"96:I5eDE/3sy4Xf/2rEB6uaOUpmLK0phRItVKZyORVTpe0Xg9HqR5ktRKUKxN0kgDRj:I5Mg3WDBBaObfytahVR6HEQR5kBnmbZ","tlshash":"52d14488759374b196b3a016983f2546b27ab625301ec4c4e52dd4b02ea6dcf90b7b3a","size":6481,"data":"","first_seen":"2023-03-13T13:56:05Z","last_seen":"2026-04-03T20:56:11.058946Z","times_seen":7629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"616befb0e453be2fcbe850f2700499ec","sha1":"bd0ba3e6c1c1a3be64c5340ca6d40f483fe7b277","sha256":"e49c2bf41cb34c1bf7ac6bf8ddf75cd0ad25921949cfe98bee6cba28b672a874","sha512":"b4fc55f71ceb7e32865ad55098d169a1bbf06d0c72714d9c579c9450ae3aa28ebe56cd145d4484e27f96a7941820a6859dcee88d83ceb7669bfc758d219c5b03","ssdeep":"","tlshash":"01900224419428d620a836577398a0519ac3c1490c1cc429384dd1451e53004909339e","size":55,"data":"","first_seen":"2023-03-07T01:28:28Z","last_seen":"2026-04-03T21:18:52.664703Z","times_seen":2277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","size":15073,"data":"","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-04-03T22:31:34.433482Z","times_seen":48006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-03T22:31:34.456417Z","times_seen":217413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-M69GNHF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"70e960d8ae7b0942c96de1a607c8f195","sha1":"9f33bdaa6001324722d1642632b1eb63a0acd120","sha256":"a9d7c67888c4da778f3171a803c0de1a3d4fe63e1442b26846e594ad179c0abf","sha512":"431203d09c733f4af4757d7f1e0bab544eeb62a6f96983d22f2c20be1957e0100cceb3bd32107934ff325892717c45e8aefb5de316bc42534cb88883887d3ca8","ssdeep":"6144:6BIe7ma2bulKY/1u99xHDmHYmyBFzvnszmxWovPad4FpC1+T:9C8bu7/1mbrnsOWdMpX","tlshash":"618419ce73c674669396a078503f118ba57b29e2f44cc895f18acce42d746aa4237f7c","size":383897,"data":"","first_seen":"2025-12-13T14:03:51.70606Z","last_seen":"2025-12-13T14:03:51.70606Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"98964f8a7e3572bcb012fb9292894927","sha1":"6d706c113a8c880b6d7524e700cb2159b0322c13","sha256":"9ce14f557661fa0566d6f2e31595684c196d45d0dfbe8d088cda3a5c765bf3e9","sha512":"49788c2d675ddbe942058c5c7e022e7d8c9121549904e6e477dc329be60a0a2c8d6aadfd3737f6f7a0ecc2a8d1c998791111453387f1db722554d219e95a2218","ssdeep":"192:fXa1n1Qk1i1GjhPNgTRByxFHSeppo1w721BEa1S9fTZ3NBLzpYs1q:fM9p2","tlshash":"a442414a34f312761ba7b1bc864ba100b37654a770889ddefe9d83542f0293d82d67ec","size":12516,"data":"","first_seen":"2025-10-24T18:33:48.615598Z","last_seen":"2025-12-13T14:03:51.800071Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/astra-pro-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=aabd2ae4238bd052108b","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d6e962d4355f2449ec11d9459af9c85","sha1":"a051d62e07c2537141e4337c96fea3735e8ff600","sha256":"4cbe790fc4be08465dff197690598fbd2b9b8b051536caf8b021e7d171d028ef","sha512":"4ad50a3bbaf1e52f1b362f163926ebe6060cc287c4557aabadd4970c5555fb33af478230a122c559e9547d1cd21f6c01fb34087903175f3e08d49133af28a3f7","ssdeep":"192:tXCj6CnyYlqqOre482UO7N1qqjs1SIVje5L1CdIFLXPMoB6sxdg:u6CyYlq/i482UO7Na1vV65ASrUo4sxdg","tlshash":"aed1b63a3224d9340bba4aefb978e3d0f464b519b90792e4c9dccf0924b5d43139876a","size":6573,"data":"","first_seen":"2025-12-09T18:08:59.722451Z","last_seen":"2026-04-03T18:28:30.751043Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/jet-menu-public-scripts-js-after","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b4d2ed71fbb3c658f1ffbbccbcc3c75","sha1":"24e880683bbe903afd7a4919380e2f2cfb9f5716","sha256":"4b89f6497ca516bb2b90f368179dfc3bd63705789ef76d9224daa762eb4ff755","sha512":"9662eb3725920fcb8c1e758922e4060e28dd235f101bb2b7001fc8e16ce8b7f4e1ebd4698a928944164aceae67fee1e492d82a050254725a9d79d0927a70bdd4","ssdeep":"","tlshash":"8241ebbac4e4a3700eca00f52821cff2e82331b0e0228000019cccb88838dc2cef28a3","size":2058,"data":"","first_seen":"2025-12-13T14:03:51.800933Z","last_seen":"2025-12-13T14:03:51.800933Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/chaty-front-end-js-extra","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d29ed7039f1fcaba7a6f6347cb1945e4","sha1":"f2a9eb53575f37cbda132aa75a180f3b04a808fe","sha256":"2c86aab9f2408124369dc2dedfc883ead401a85067102e81dd0d12814f6522ea","sha512":"1c6381cd0d160743482d602325cdc4aafecb2379191dd42842559fe7a014c374a92c963db4f9b750d646779251757fe02f8ffe7a1fcfa86c32fa63a64957ca8b","ssdeep":"96:thutyWx4j0MIsemF3uObFQbtG8kmoiglxwru6Y+Qxs:tgvx4zheu+Ob6tkmwo6N+l","tlshash":"d4c1c745cb5094760753a7b5b86b4f2b125a2098f8c8af30effccc6950e91ced702355","size":5796,"data":"","first_seen":"2025-12-13T14:03:51.801702Z","last_seen":"2025-12-13T14:03:51.801702Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8677d8dfcc987f7d42b832b5ec35587d","sha1":"471ad10036d5aac3064d12441eeaffa05340e4b5","sha256":"b4bbbeb410140adf0ad76bf74e2a6525427e7fd867020599bcce5ce6c724646e","sha512":"ff8c780d9d829ce12e12f10f88fa2b4d970416aea6474c0465e184d78d19e2bbe450869004403e5bf958b394834998ac4d7ee037fed8a2425a92b994581997fa","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5p0m4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5WmH0IW9v7G/2","tlshash":"68c152941694fd2b21e139d8e01b9735252ec1373c1af981fa32eced54e4ed183aa532","size":5677,"data":"","first_seen":"2025-12-12T23:30:14.897515Z","last_seen":"2026-04-03T20:47:57.100244Z","times_seen":21246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=9.10.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0b1556b9e1a9994fd779ceaffe12c9b","sha1":"dc70ce7fd7c058bbc47e8d8534014c0a12ae1885","sha256":"7790882b18f7b3e10750f4474dc1a13150a2ef8510ef4c2e3e52c5d5f776db87","sha512":"7ae00741a4a60920ef95fedeb573f6ef901470fa77d939b8a8a0dd4559492c2e99255ad1ee18fedc12abc02fa132474dab07f7583e3876ce56fe41c9c6699fd9","ssdeep":"192:mkgHygW0Je1ZZe1ZfRWrL41QRPHX+JsoMMCHAN1BmooMBA1TBmQzqIUg:+HWfrL4mNwJalzdUg","tlshash":"5532b69235dbaa274be7aa30cae71307f061239354840d80d6a09c66b9719df93ddf1e","size":11894,"data":"","first_seen":"2024-10-23T16:25:18.937413Z","last_seen":"2026-04-03T21:51:49.252306Z","times_seen":17925,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.min.js?ver=1.14.4","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"30571d15b5d67086248f7043c471326a","sha1":"8f4692e09875820e406d53c4db2ced3f911b4ba4","sha256":"5a59125afa28561f5d8df5ef70bf510f1eda3f7af96b221c8d8b0ce68f35050e","sha512":"fb681a678836b55f399d71079fb11b68cc256460e0a86a50636a620f15eaf2066438f88ae7d0366be49e3f90db49391cf362f6c6b5544d7590da67de8fcb9e87","ssdeep":"1536:mx1HvXTZqUhsS4q78aJ0vDNVUEiYV9YWxi42CIkF/F8gy8BMgqUM7ZNofk9DwCUT:q820vDN7icSW6CIkF/F8gydofkEhclna","tlshash":"cc83a6253410697601ef2afb909b31cc22b158eee5024c782534c8db2ef9ed627a57f7","size":87571,"data":"","first_seen":"2025-12-10T07:17:04.945302Z","last_seen":"2026-04-03T21:25:07.947908Z","times_seen":409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/astra-theme-js-js-extra","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0b45a0b295719dc61368717a57b4","sha1":"1e06a8bc8296036717ba2a5da9613dcc401cc80c","sha256":"e3f3515047b79c9d43f8ff906d8736da67d62262b81b5630ad91bafd1601e4ec","sha512":"fc551ca79e56d095a46181ec2b48dcdd8673a771a0bd876112a7fa90053beae649d6e81d57b3afb64338ba2bd08b0538c908b48aff315b60b5f5834462898ed2","ssdeep":"","tlshash":"d741a710c2d31d0172d78c7250118f64b0fd92a0d1d0f04d5a7c414862e6a1a1668109","size":1915,"data":"","first_seen":"2025-12-13T14:03:51.802572Z","last_seen":"2025-12-13T14:03:51.802572Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/elementor-frontend-js-after","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7946291d67f95e6eb4a2b7ce65c869a","sha1":"fc8fe4acb0d3dfc2488173f167f1309ba082112f","sha256":"dba98e3f21a1adc8f7d5e2b2ca87bb33b4ab7992509ea6ad991d81ca02b874a3","sha512":"5e2b137650fbd9f669f9629300c2f58ef9eddeb6ee3708877a6558deb607cbf4e27ec3ffb23691bec955c2b1595731c26d5bd39f8005fa54fa28df605d858d6c","ssdeep":"48:JMxg93N2rYsLXM96m7sZ61iCA9cECc++KueZJcxKqCoMM+rW7:v9d2rYD96SsUkCA9TZ++KOCoMR67","tlshash":"e69154b4f75e5b3b20362035ad7f51fcb12cd532f28474667d95560800e0525e3bac51","size":4593,"data":"","first_seen":"2025-12-13T14:03:51.803324Z","last_seen":"2025-12-13T14:03:51.803324Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/astra-addon/assets/js/minified/purify.min.js?ver=4.11.11","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd87e766b51ac40500bc6a7ab45fdbf5","sha1":"7a110e184d0306b1e8dbdef44398a47be54effc5","sha256":"f8e4d7b0f1c613e9e79f2dd8d37c8b30e021d06d300684b29750c7f02e53e5fb","sha512":"37fd87762923312f9db9f4a40aafcad980150ec4f0d54e859bf2f6dacb5f1f5b1a0e512e3d32033e088bf98228a5a18b3951c5d885a1ed7d8f7bfe999b7fa379","ssdeep":"384:1yG3zyDNiBJRMmv8bUMFAmXlV1O4v5DE912nkk+i7wCWgXcFJBtcTukR9EL20mOq:FOYNlv8IMFZXlVU4xYH2nkk+i7wCWgXV","tlshash":"a1a2495e6d2079765fee41d820bb590ea1bc101f700c84b0e7ceecb554baa95606bf2f","size":22215,"data":"","first_seen":"2025-04-19T04:49:15.134746Z","last_seen":"2026-04-03T21:36:03.909248Z","times_seen":6742,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-popup/assets/js/jet-popup-frontend.js?ver=2.0.20.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"881014cdbe31c3b3442a6721466d01df","sha1":"c9fa7a7f2cb6efb2fcc4d3a57d0f3257a41b891a","sha256":"d48f54b0eeac5d37281117f1f779bf979eb54777fa19c1cd51cf4b2ca07214d6","sha512":"d978c16fb2b9e580cec320668dd233f753999e06d3eb438e7f993d261173493018c8df76c57b491dcc8af399d10f0e3c385229195f1dfdc34020f78988c5b09f","ssdeep":"768:nlXFFH3teupgkThekfqudV6q2N+Hix0XbL6LBL0WIV5hg1ghA1Bh4T17mZaqQKmN:lVFXteupgkThekfqudV6sCxcL6LBLG","tlshash":"c7f20dc0e7edb063456fb129dd6ea2de613c4032b8154cbbbc5c694427c096e8b99e7c","size":35803,"data":"","first_seen":"2025-10-11T11:23:23.342973Z","last_seen":"2026-04-03T22:06:03.384379Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7c898d1649315173db5d2d8730fb75","sha1":"364a6836a90b28329404b7d7f58a524861ef63f5","sha256":"f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552","sha512":"4ed0541755c25dd9afbf9da3b64ac082a2f7119720e4b8a21fbc7cb302278aa2d2e15d0e3f735f14a9913a38508c85c45b3df22922609adfe551541396881601","ssdeep":"384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym","tlshash":"e5b2b4ce314174a386eba1f8512f162652336466e20649dd7c3faec55f28e6931b2f3c","size":24109,"data":"","first_seen":"2023-11-22T22:20:37Z","last_seen":"2026-04-03T22:32:40.137531Z","times_seen":66799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d697c830fda7e947b4efb6e83162396","sha1":"9d2b4e1102f12b9332138d3365a1d30cfc02fba8","sha256":"b9bc222aa72b968c5069428671e53c22206025bc9a71e184f9470253d5494bfa","sha512":"85bdc5561bbe652f4426f64e9007eaec9e66c4fc666f29c6eea02d9aed0646cbca92e2e732fa0f4500de0e3e90ce36c72bbd6a3ae858c17ebb1298907c5e87af","ssdeep":"1536:SWxmDu+HrrUl53yQ5RSSYeAjA6c9CSToZ2L483FiOvn9G4cR8+KAiA2gf6XSkCfR:Y2HE2HsAu","tlshash":"1983f8953192f8b607fb40db903b4006f26619b8b40da094bbfddce19875d8a133bb39","size":85769,"data":"","first_seen":"2025-12-12T23:30:14.93736Z","last_seen":"2026-04-03T20:47:57.060158Z","times_seen":16033,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-menu/integration/themes/astra/assets/js/script.js?ver=2.4.18","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6afd8e694d04bb761d00ac20c73c53e9","sha1":"bbf7acd378a807ce43a721797f0efcc7cf401c1e","sha256":"2a3509a0c39eaba33e3bd0360b3bca2328e16e09f5628982773445315099f70a","sha512":"8c53db9a6d8e7fce70e5fca5be279a0c7d546f3f1266905072665ae3eee1714a127193483da4049a9fbd9a134292ca6af1ff1dfe1ad84dc8766d43111dd89b78","ssdeep":"","tlshash":"99c08054d6d4220950b77337551fd05811f30410a105111340d742500f5a9562982f1c","size":168,"data":"","first_seen":"2023-03-08T01:10:21Z","last_seen":"2026-04-03T20:47:42.696204Z","times_seen":319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-search/assets/js/jet-search.js?ver=3.5.16","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5b0f56ce106e724539210501091939e","sha1":"00cfcd6f3e75720e47f0d203dc4c016486fb9fb3","sha256":"8d132e1f668e52a4985502655305832603d5c33298147adb8548b7ced244a717","sha512":"3c617de132570882e7c75e614ad07a3e45d0ad482cc69500a774e71a7e4ca90fdda45252bafd947e55c24e810936d42d01f22dd13ed7012f5f182e26d5d6ff9b","ssdeep":"1536:AZybdTkei/3j6PvqML+wgiqbHfjjmbws6kV599Z+seVgrY:9dTkei/T6PvqM5Gfnxs6a599oseVgrY","tlshash":"0a7374c4f76c25eb41b73065ac5970cd643ca832a408a97abc7d169027c9c6d93eef9c","size":74664,"data":"","first_seen":"2025-12-05T00:58:55.040781Z","last_seen":"2026-04-03T16:31:14.058004Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-04-03T22:32:40.114182Z","times_seen":71860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/_/mss/boq-content-ads-contributor/_/js/k=boq-content-ads-contributor.ContributorServingResponseClientJs.en_US.sChNH5Osak0.es5.O/d=1/exm=kernel_loader,loader_js_executable,web_iab_us_states_signal_executable/ed=1/rs=AJlcJMz7a3Aoypzl3FteasZliPsUtk5MMw/m=cookie_refresh_executable","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"39748362b9a64e86bde16f37b3c25737","sha1":"c3f63f6fed9db663aad7be98e4c03cc99cec3dd8","sha256":"39d1e24fc6f5f5c042450577e37f898a7851d914c37b3f41c4aa243abaeaade2","sha512":"2ea3fd63db7ae7b2d984b352ded5c29bd08db9f555efbd22cd26193360a0060784c84f996ceeb6c490fc546babc8ef7e9272b0f674e628ead632b9c8f3af5ffe","ssdeep":"","tlshash":"13517397719161fa0353cc22900b543a383ba03fe04991be35fadcf448f500a2a29bfa","size":2702,"data":"","first_seen":"2025-12-13T14:03:51.703753Z","last_seen":"2025-12-13T14:03:51.703753Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","size":457,"data":"","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-04-03T22:32:40.128332Z","times_seen":81908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca8983afb8f503fb2b55ebe9313c8266","sha1":"42a940ed1a33e4e61c5e5b8bde70c6d89f52f648","sha256":"524854d7adb7b45a3ffbb7f23af917d125fe4ffaffbf67f6ddbbdff25a050c04","sha512":"85082e249e3948ebed81ec4bbb067b3b8f2a93f893458f9ec027a988c86e73e503654851363504f258b5f7bc1dc79f9252a4732a0dcf5d7ba6acb6d276e089a0","ssdeep":"","tlshash":"f5310084b3cd227ee47d102538ec55fc673e5376b6192e767e29b0151784e48836583d","size":1743,"data":"","first_seen":"2025-08-01T12:53:57.23112Z","last_seen":"2026-04-03T20:47:57.141922Z","times_seen":2508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8991ecf065e2eec6f2ac1863dd4d5a06","sha1":"70cffe9f2c73bebda9f236ba81b429a8e3ac2174","sha256":"a3401b10ee0940a2871abe5d10087416901668257f540451f804702b3ddade4f","sha512":"500f2d166ac2db66025fbf015991ce19eaa7f810baddb4789f251fcff664c8e06b96ab696debc6f8ccffd984779606b11329cde4b94023bd17c8108cb99add55","ssdeep":"","tlshash":"34813f6138f2021912a721de821b040c3240f4d7f268f98aba7d83916ffad14b7e62dd","size":3859,"data":"","first_seen":"2025-10-24T18:33:48.619727Z","last_seen":"2025-12-13T14:03:51.80454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/e-202550.js","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1e85b83d13876fefcf2d873fde8da3e","sha1":"09d271f2a7dd17e66a19fcbfca887734d951ed2f","sha256":"2abd616c43c16e7a2d01f1f1c761d6c12acf4b2ed9a9a411289ee3bb5a681ffe","sha512":"a1ab2e32190702e46c440606a45e51dd073168fa11828683764aef077fb2b495343bd91ee784974244c37d0a52a8225d1a6359ffe0ddf0ec6971aeb7c50e3ec8","ssdeep":"","tlshash":"6b71646536c5f0381af630a5235f630af5ba8b7a7d4a9044c37cd4b07c79e8b9412f9a","size":3812,"data":"","first_seen":"2025-06-09T00:15:30.881783Z","last_seen":"2026-04-03T22:25:02.385599Z","times_seen":45005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-elements/assets/js/lib/anime-js/anime.min.js?ver=2.2.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b7d9c2344ec7bb776c95e6d9144470f","sha1":"f9e83481831a2618b30e8f38471ae8d16c2a6f21","sha256":"06ec6b51daffe18a33b502f14fac6674eea1490c3677a06d054635a6d78676ce","sha512":"5fc9592918dc54d8814979fb3cd7489dc82ecd7e2ff2978a22e0fd0e935026a3a62ab1f8285bd89030587498a46019a0872a58490fa706572526c0027c385a2b","ssdeep":"384:xGUErMWrjas1PslwqyfSFBxE4YZxOZHXxu:xGgWHXRPIBCVZxOZs","tlshash":"d45295cd72e2f2a2c2536d76c16f610bb73a6ca1e50ca8a0d129d0c07d7062e4677f6d","size":14420,"data":"","first_seen":"2023-03-07T01:06:51Z","last_seen":"2026-04-03T22:06:03.512446Z","times_seen":4219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-04-03T22:31:34.568064Z","times_seen":175850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/_/mss/boq-content-ads-contributor/_/js/k=boq-content-ads-contributor.ContributorServingResponseClientJs.en_US.sChNH5Osak0.es5.O/d=1/exm=kernel_loader,loader_js_executable/ed=1/rs=AJlcJMz7a3Aoypzl3FteasZliPsUtk5MMw/m=web_iab_us_states_signal_executable","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa85d78dd9031e8c8166e32a1be63ef3","sha1":"682e19ef74eeb9120d60c43a7d9c1dcbcd22b31c","sha256":"56b02a9e2de9d2bb234c59731903a45e0f5ed48acf372354a9de3040d8612b80","sha512":"eaf5efce9df3ee62fcc236a8dbe0bff833da782c417cd0b5095b3cb7a031dc6569a60b00f39f44487d05bcc9b796add7899ef657c0f9e3bcf7d3ec8dda381142","ssdeep":"96:3zM8MDM8ix/Q02gglUwwzzUjuOZI1H1czL/AJi7kG4VgVNDOBVcvMiIhO:I8Mo8ii02ggqfUjuK4aP/kG4yoBgMHhO","tlshash":"45c10a86308794f662a5e83d442b8116b45fb813e04ac1af7a968df1fdf140e5534ff8","size":5616,"data":"","first_seen":"2025-12-13T14:03:51.73948Z","last_seen":"2025-12-13T14:03:51.73948Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.min.js?ver=1.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdc4a1b7c4163deadf26c7c6ac356790","sha1":"bce49faf951431fee46e564190801594b21b6216","sha256":"0e3600ec4c2bc03d12652eaf6b439b731b697e66095d12f34ceaea5c5c7c9fc3","sha512":"de4fee70dde42615d5a6277e9b9537d67df2ea6283b85803657c9c096bb923ba47837e82118b91da5d3c805ab46b6ad6da12bac106dbcd2a8de5ed810a8f6b38","ssdeep":"","tlshash":"aa415cd6711166f632bf2b7b107eb006a5366d79e60b80607533e06d2539ae42703e9f","size":2252,"data":"","first_seen":"2025-12-10T22:53:36.722574Z","last_seen":"2026-04-03T21:25:07.982413Z","times_seen":377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/rocket-preload-links-js-after","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8420626ae8cfc4aed84a8c49e87fffec","sha1":"29a9c0c6343c6c63ae3c4ce9bdba4ae4bd89057a","sha256":"d23d2f018c57b6a759f71025797aaeb1279dd6675fc47cd2c40312facd76c214","sha512":"85998fc2bfe1a95f28e3849ec626d3e390bd99f4576b3c7af3f7c581571c3cfa809ab56eee658b28f8da859202e5c82312a1c8b19c7bea27eae5dd3f94129629","ssdeep":"48:h9GmqipfdcR4C0GbLnghDu98TSTO9xqns6Gm0DDf0kv+lZTmsGY1xC2DfX/AfzWG:h95qQVNCXwzksxmY06kxY5","tlshash":"10b187b5f14e743a09638735402f720aa27b0918e4d9c028b436ece05f74f5c609be2e","size":5178,"data":"","first_seen":"2025-12-13T14:03:51.805911Z","last_seen":"2025-12-13T14:03:51.805911Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-03T22:31:34.450016Z","times_seen":108114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e6a7f474a3f9e76ae05019b1f05793d","sha1":"11f65b8149630496b8747bb788588359cb194c77","sha256":"4f3d54cf1cf26573ae917ae449e322469fb756e8c4280ebd2ccee1c215f01ed8","sha512":"bdf6772ef2aa1646539fb04982511c25b4fcf492803e342d360b32c06ac992f6c17c670880d5811192c365c974b3f0808d7755b777134ad1735750b2b84d6753","ssdeep":"","tlshash":"62d0221002d32e0172db8ca29021cfa8f0fdd2a0d1d0f08daf7c824863e7b1f1a6820d","size":223,"data":"","first_seen":"2025-12-13T14:03:51.807071Z","last_seen":"2026-03-28T09:06:31.64171Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/rocket-preload-links-js-extra","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8443dcff09088509afceae60e2930acb","sha1":"45350b7fcd89e4de65fb611a8627e9b89a8c3aaf","sha256":"74e4baac1d8504a7f0899e61b7ce112e13e07fd413697b2f494a27f9a86b4073","sha512":"1aed6c8c0d7cb1231e66ca1eae038dec1506b103c377ef63e3ff742df2430801e7cf2ac50b028bbb7f549dccfea72c503088b42f8b6fc31ce965b0b73e8ff134","ssdeep":"","tlshash":"764197b6f2890c4240168af68f20c637bfcd8d04d422c925e108d1988019f80d08f822","size":2196,"data":"","first_seen":"2025-12-13T14:03:51.807965Z","last_seen":"2025-12-13T14:03:51.807965Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/advanced-ads/admin/assets/js/advertisement.js?ver=2.0.14","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b645b5402a5096f324a6b37d0a3259c0","sha1":"3741b4d49e4ab0034f34fdb9ce5afaf96f940b47","sha256":"2878e3b9f4818d49affee273031a409b8d24e264b58eb3f4d9b0d1195a6d2ff1","sha512":"a86a7ab81b7c02c027c34b17282d0a4150649a47534b73c86d6ea7d6109584a5f8594063227900d99d84e5b9f26b54a65654be2b75aa33b20c0a5f8700ee50fe","ssdeep":"","tlshash":"49900210815501d9b02041511d06e4e2e8904460c7423de28194400c500a540005005a","size":39,"data":"","first_seen":"2024-05-04T21:47:36Z","last_seen":"2026-04-03T19:27:39.218836Z","times_seen":9799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","size":31880,"data":"","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-04-03T22:36:24.512201Z","times_seen":59859,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1G95R5YDNV","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e65015378c56513a2e8b9859e03388c0","sha1":"22d13cb7f106fef192a20bed39e98f7d1a140cde","sha256":"04b64fb6908f6e65758285af4608aa861f3be8aae52594a9777a58c4ed3eacf0","sha512":"12617e4fa3c798ccd9a889860dcf3091e87fa83e5eaf907c82d141db853d6b232109d24da8caa597efcbc32d806c746b8d7d186dd2042a6b2a67854918f3bcbf","ssdeep":"6144:Bw7nTmwObujKYz1U95efDHHYOyQFzvnsyOZW5UjaJddpC1u4:0T0buNz1cEVnsnWJNpY","tlshash":"9c8419cd73c670669392a078503f118ba57b69e2f44cc895f18acce42e746aa4237f7d","size":376144,"data":"","first_seen":"2025-12-13T14:03:51.759674Z","last_seen":"2025-12-13T14:03:51.759674Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.farescd.com/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.11.17","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.11.17 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:17:39 GMT\r\netag: W/\"69380553-3ca5\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwGdZyWYKqShwI5pq7ZP%2FcvvIhOuinCH2vBhQl8Q8nkSd1pR8kgKI0UuSp5pp88RME3FcZxLw%2BJcvkAnK%2F5Pdr2mmS8wJLxM%2FKrB9fVapw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f6bc083181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15525,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15525), with no line terminators","md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-04-03T22:43:49.49286Z","times_seen":14410,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/thumbs/%D9%88%D9%8A%D9%86%D8%AF%D9%88%D8%B2-r658izgt3mpc7kdkftyx1xwcnpt6hkho9gyfmuvxa4.png","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/%D9%88%D9%8A%D9%86%D8%AF%D9%88%D8%B2-r658izgt3mpc7kdkftyx1xwcnpt6hkho9gyfmuvxa4.png HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 497\r\npriority: u=4,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 21 May 2025 17:17:14 GMT\r\netag: \"1f1-635a88951ef10\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I6ydjMmBNuHpP%2FGMBd%2B%2FtF6EyRsZ6T5L9sMeBiRkSv2XQwdqUL3yhv%2BAbXfXXkJiAoB35ViC54Yk5gEasgBPLBvJzvgyv7Q2FgNYFkUFPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fded2f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":497,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"dcf59a1a3fb62ef58a60d38a4a722cd6","sha1":"a8cb5e3b77e25849a3245783f16964fa904eef20","sha256":"053bdc178f8b7b60172b0946fdef37e101bc7e62d6aba7db3416fd24c4d5cafd","sha512":"7ecf95b12d6f8b2de86ea7c8eff1c5ebe2456944cbe099b90a2055a0f843fbfe14f68d63d0924802be48bf87c2b5850acc671de210d7fdf5529efc72c011d93d","ssdeep":"","tlshash":"8af020b59bd4c0844020ef295ae5de139f26d984c93bfd4f23e04ce722309b149b53c8","first_seen":"2025-10-24T18:33:48.552128Z","last_seen":"2025-12-13T14:03:51.692006Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-elements/assets/css/jet-elements-rtl.css?ver=2.7.12.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-elements/assets/css/jet-elements-rtl.css?ver=2.7.12.1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 29 Oct 2025 09:27:26 GMT\r\netag: W/\"6901ddfe-63de\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6GdqGaKU1NkDy6lPC%2Ffh377omgu8eQitcsjCQeiA8hCD7z0Cv%2FIWfsgaGKzh6T3yoBPTDwY3ADV4guT7oShfZz9eIn%2BZ87TQwQbE31jww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f64be63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25566,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25565)","md5":"b4672d94fb1aa92fccca6a9b2e676190","sha1":"3db446d7e066e248bd3df999f3fa3d826e05c390","sha256":"38cc2e3552097c405c81fb5fe789fb8e32cec86ad353c25b13546dc9739a6c7d","sha512":"9ef7d30ae45ea5c9974e4684fa11c1d0e8acd3d0adeb5994d8bab42f70b8cdaf1d39d8065dc91fe16ae9c27ca8086b96ba68b7a6176c40a9dc6201137fd1a07a","ssdeep":"768:glqA0W30k042sDx9aO4A4+fWI93DebX0swMbsCv7oG:glqA0o0k042sDx9aO4A4+fWI93DebX0e","tlshash":"5cb253676c922348401f8a0287ce4eac576dd2a7646209ef73a1780fc74eb5d27db197","first_seen":"2025-03-08T11:58:04.72834Z","last_seen":"2026-03-31T12:47:57.00776Z","times_seen":81,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/06/Logo-white.png.webp","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/Logo-white.png.webp HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6102\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 May 2025 17:07:39 GMT\r\netag: \"682e085b-17d6\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1R7phvglmUQHAGyh4Dw4X8atHZBF8ZSqrPMJrkY8yAC643KshTdr5GLOlMEzfnEmrxCHCzA9dcsyvO%2FTRon3TihiY%2FSD3TXEp4bkbGwOxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600f6dc163181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":6102,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"30c922081af7a65db582d3432090c3b1","sha1":"9a56b9da066af77ee42ce0dfa1e902b725fdec15","sha256":"254dba244ad98fc8ac1cc8dfa82e76d5065c2d002c1bf90112244ebb1edd188d","sha512":"d3926b8bfcb2f1f55e63017db72bf71d588ad024f72afcf1bb7f00f4204c2b425a4e3cebbf4afb8b2e97c16a87bde26b88efd2a1d28da7217d755c4b3d155da7","ssdeep":"96:fN5B/Uh29bq4BgJ+yUISbClTyPOXMzgJtsIH58VafeXXQXsQHBp+Yrq/CIA3:fNcWnBgJ+yUISbCleO8zgJP58Va3XzP/","tlshash":"13c17d57274c6714ef89f53a631318ace7c50c8acd847976b1b6aad96c780c58153ef0","first_seen":"2025-12-13T14:03:51.693634Z","last_seen":"2025-12-23T11:53:47.327382Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor-pro/assets/css/widget-post-info-rtl.min.css?ver=3.33.2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-post-info-rtl.min.css?ver=3.33.2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 04 Dec 2025 18:47:26 GMT\r\netag: W/\"230-64524c295cb80\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18ayL6lkoVhIlRH50cNm2DYNAtTc7OSQOEfm0%2FojIPXKRcWrxdHOYErqBmEauq7g5bNCk2kL4QyO7rTryWEhFkQiFjTdrj1WE24OT02Jvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f6fc1c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (516)","md5":"7a43824ec3c01c74e50b45956f784ab1","sha1":"2929402ec86541f97e79eb4ee5bc22eafba6ca57","sha256":"a6ebe56ee24e2f77ab43952a82b4c445c9e8fd60b3ae53fe70942c260c2c58bd","sha512":"9bff1968038b528676fdafb46dd2b1c66e0ce9df8b6554fe8b94940fdb8f34e89264ee9ceefd365c8180e4951f94f241be8f07bf548c6cd8eb546469690944c3","ssdeep":"","tlshash":"aaf0b2d13c97c1069aff605729972a890488c5dfe9b0e885f8451313e73ae853b20534","first_seen":"2025-12-04T07:42:29.90965Z","last_seen":"2026-04-03T18:52:38.355129Z","times_seen":632,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Cairo\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"DF:9F:85:F6:4A:53:64:E2:D3:A4:9C:9B:0A:4D:88:F2:DD:8C:92:6C","sha256":"99:65:94:2E:11:0B:3A:F6:B6:E7:38:F9:58:D0:01:2A:B6:CA:D4:2D:38:BB:87:ED:72:23:CA:63:32:85:95:35"}}},"request":{"raw":"GET /css?family=Cairo\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 13 Dec 2025 14:03:15 GMT\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1790,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"8724863b8b8fc42004526d375eb8ba05","sha1":"153e8981008ac36a8c19bc02624ba134bfd3c61d","sha256":"cdd56f3de5e662dffafdc5b55538550c34c1545808e02a5447ac5dfa8b059a45","sha512":"cac9ea9e761b09fc6736184906f8952e595ff0f0c24274b8dd95816b5bbb43c057241f408ec3344238c1d0b913a7fe2001829b5ff1640668803dc67439e7f203","ssdeep":"","tlshash":"f6318de00c1f9184bb571dc163cd6e23de1ea1a82495886c97fd6b8b9cabc67735074c","first_seen":"2025-09-17T02:40:21.122984Z","last_seen":"2026-04-03T13:45:56.582739Z","times_seen":332,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":78,"dns":1,"connect":10,"send":0,"wait":23,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-elements/assets/css/skin/jet-headline-rtl.css?ver=2.7.12.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-elements/assets/css/skin/jet-headline-rtl.css?ver=2.7.12.1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 29 Oct 2025 09:27:26 GMT\r\netag: W/\"1ff-64248bda2f988\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WYxOt%2BKuH67XoINJPe0lVZ%2FcUW2xaReybjHJfnGhkFn2v2WPff6DP0AQMyuumFCKbw9rZ5JvkRCaUgjMRndF6bs6UYaKxmOcqyeWJfJ2vQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f64be93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":511,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (510)","md5":"c8021cb1fc5df787b2523de63274ce42","sha1":"040d8a24b8681e584321c244d1bae5217ea25929","sha256":"e2dc8ae63b66bcd0f98054a213c9f11e00609cbffb2dfd9390803d547094e4a7","sha512":"01d4f700ad1157be816cff2089847fd4e020ec5db32427581dc7fd0d7bf95741794c87ffa691aaeb3b7b6723f79356a77b4e9a37fca3a533f4df6779e369f5b3","ssdeep":"","tlshash":"d3f0a7319c1dc05efd3a0dc25550bc54f004054b55199be2faff57a0c688ec5570aef0","first_seen":"2025-10-24T18:33:48.417492Z","last_seen":"2025-12-13T14:03:51.695485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.css?ver=5.15.3","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.css?ver=5.15.3 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"2dc-64583172a5310\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0FmIkiJ1J7pg0twKslylhIteh44pGR7Q2tAKw64CIcuUZzsZ7WNK%2FfRCt%2BxkeskFSPl3%2Br5MJd68SlLBfqn30%2BoWF9bPRYhWqNmm%2FhxPeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f66bf13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":732,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (312)","md5":"1f1c6abbb54c6d189b7263e0861fae8a","sha1":"6bc092e1e58b2fa6364bc17b02443ade0c6d32f1","sha256":"5009a34e30063ffb89185274681b359ae8c7dac19a606d5b1456ee3524cbc9b0","sha512":"7dd9accf0a69d2a89009443de17d6f09c3ca55e62fe9c7c4d3f12f89354b11559d83436fbc4befc8618ccbe0fe46fea657743d758e543b79a3d039ce36852b33","ssdeep":"","tlshash":"8f0164b0810510048a40091a2bdfbf28ae09a245781daea572239c1edcf4e4d61faf0d","first_seen":"2023-04-10T17:28:04Z","last_seen":"2026-04-03T21:55:36.973477Z","times_seen":22733,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/cache/background-css/1/www.farescd.com/wp-content/plugins/jet-tabs/assets/css/jet-tabs-frontend.css?ver=2.2.12\u0026wpr_t=1765640658","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/cache/background-css/1/www.farescd.com/wp-content/plugins/jet-tabs/assets/css/jet-tabs-frontend.css?ver=2.2.12\u0026wpr_t=1765640658 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 11 Dec 2025 18:52:16 GMT\r\netag: W/\"693b12e0-8a29\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2BOz15oou1M4xH07gDbKa%2FhX5lviqY7BORkcly01m2QJy8Jr1H72R2ub219iz47sG%2BfWsFptM9xLWBqo0BzgZ5vTMa17atWBTDY7TwPHBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f67bf63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35369,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (35369), with no line terminators","md5":"95a46a1ff91d387ed9e5ce2775d4c65b","sha1":"ea6b08797d50807b78f246f42c43bcf71d9e2551","sha256":"33cb5672b37b7d774a722a148a88b880df5551e24a25d506db5fca874a5b11e6","sha512":"22a20ad7a8c5d4b8ba17008dc5e9003cd3d703f1c7c581bd973dede95cc74fc28650709cc020105865a7ce69f36db65610f3a8d728e072fda4835028dae88ac4","ssdeep":"192:toEecoEer6CEcxBlOoijbj47MgxQOajg4xEWdJjYqGw5GeqPqdl5Af5ZvcQHraxL:yVx3ODjv4ggxQOajg4+NYIw6xZUQHgx","tlshash":"2bf23e2791a9231ac117df26238ca654c538c9b2e82776fe3591ac09c3d7b4447e369f","first_seen":"2025-12-13T14:03:51.696718Z","last_seen":"2025-12-13T14:03:51.696718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu-rtl.min.css?ver=3.33.2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-nav-menu-rtl.min.css?ver=3.33.2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 04 Dec 2025 18:47:26 GMT\r\netag: W/\"6931d73e-6ae4\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h000HRZOgJOItBrNJe%2FXd3S02MnVv9COinKe4HCN6QiDEeAgZCFF5Ob%2Bx3eVZ2CMIMQhwL%2Bm2Q9llwhKTLr5a4UdXgUCo%2FROcmPo8HwbRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f68bfb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27364,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (27319)","md5":"96c333d581ddae29d2d6cd218240f46e","sha1":"0702933ffd300dea8f568c7542e0319c501b7e26","sha256":"2bc9db4ebf7c4ec09ff3f14ce03eb2f1429c4303d0ebf0ac9dc0fc7e7bc8cdfb","sha512":"994b7dcd5ad6632d57a891d9acd051c02b541c9699e071c7bce45aa0629502d2f79c458921164aa5b3a791a66a90d60873b67c26d4333942ea1b7ee89e3b7a38","ssdeep":"768:VrPoScoKjcUlwvGQzKVwGz42lvQz0ABI5PmBMqRIEEtCelEqJUrY+Xz:h","tlshash":"d3c27a81be93592f032f613b91e2c60c4f9519c8b2a176a9f0f5a10f41d7d5c6bb7b22","first_seen":"2025-12-04T01:17:41.565829Z","last_seen":"2026-03-10T00:43:09.801265Z","times_seen":32,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/cache/background-css/1/www.farescd.com/wp-content/plugins/jet-search/assets/lib/chosen/chosen.min.css?ver=1.8.7\u0026wpr_t=1765640658","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/cache/background-css/1/www.farescd.com/wp-content/plugins/jet-search/assets/lib/chosen/chosen.min.css?ver=1.8.7\u0026wpr_t=1765640658 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 11 Dec 2025 18:52:16 GMT\r\netag: W/\"693b12e0-2891\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ctDmiqm3XMUTp1Q2pBh2lcZq27pQih4FP922BBaznCh4IP%2F4kMVWYHsXaX2TJm0DCXMMjQdigYWW6eTY%2BGEzUr97kYpaDpEAFW9NmgfBow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f69bff3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":10385,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10015)","md5":"1c815f88d554ad4847db8b8dd50ac7b4","sha1":"8d7d0b07805a33bf25cf9b7b450edacee29fcfb2","sha256":"453419264d8aa3a96c62a9da7487bef371ba135b411ec6094ee210a9f93925a9","sha512":"a48588247b7e9ffc1683e61bec8c314db2698ea22e29f4e830aad971e45c40cef746d62d7b9c4ba1f41c3da37c360a67b1e8e1e218a1dfac1120fad06b34dd73","ssdeep":"192:ztdTOHAilOLobAU0iZpEG1j0LvhpBaEMuawTv0z:Rdo3lhFrEby","tlshash":"3622d06aabe52a2db8f785fca41155c92730c4e2d60d0eac7e27b5e0cac5cd30053e5d","first_seen":"2025-12-13T14:03:51.698082Z","last_seen":"2025-12-13T14:03:51.698082Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-3ae1\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vxrSSl9%2B%2FVBIZR6J8pfdx2gD%2FYyjsxxhCFSZyXVRhYNwmxPPWMajt3edQtjYDVFSZKDartGuGivtfAOtkwbPSw%2BE4X%2FF6Wu6lMxHuVna1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f71c2b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15073,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14886)","md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-04-03T22:31:34.433482Z","times_seen":48006,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 04 Dec 2025 07:51:31 GMT\r\netag: W/\"69313d83-14c2\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=txzGDcKmnFHRgQcyojGd3dzVPtczqDrhmkKi5tupSYxaVB5PRvE9ruBoCKYYKz%2BsIpdur%2Fh%2BQNjmrE7QAvNouxGzpiVjQ9YD35r1s1HPyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7cc563181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-03T22:31:34.444251Z","times_seen":106966,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-popup/includes/elementor/assets/js/jet-popup-elementor-frontend.js?ver=2.0.20.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-popup/includes/elementor/assets/js/jet-popup-elementor-frontend.js?ver=2.0.20.1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:01:59 GMT\r\netag: W/\"6925fd27-2558\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqdcazS684J3ef7NGYpbJiBXLz3axh7cnKg8iANtm0fUkgeIuN5LY9lzm89AACTeDhalEMrAfsKQ6ELCEVGkDdncTXC6CUeDsrDvWxTjng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7ec5d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":9560,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3f09ea3cee04647df66535f6cbd1b0c1","sha1":"9fa9c7fbe70696dda85724d85c30eedf51b68194","sha256":"fc04daa4b2b92a35caa1ef91bc2156f3e2fdff3ae2ca55291a069254de9d9996","sha512":"d2fe878fc3e4005adcd6a0873e14baff13c30e754afd07a0a2b60d460f6269aca631812377af1b4f3c141578c489283e48185ec1fe6e28c646caef79556a76c5","ssdeep":"96:FsmHDeK+iHun/udLpt0Q47MNKGt0Q4KI+tbIRWht0Q4QmmtqHSs5wchHz5SHarsf:iT/wf0Q7H0QbbIe0QKCqHL5hT1x7eLB","tlshash":"7a1202c0b3ee70a7046f3066dd4fa29d663e5471b401587bbd8c25a023d4c9eb72ab6d","first_seen":"2025-02-10T13:13:04.294338Z","last_seen":"2026-04-03T22:06:03.491628Z","times_seen":1251,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jetformbuilder/modules/option-field/assets/build/checkbox.css?ver=6e25adbbae5a5d1bb65e","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jetformbuilder/modules/option-field/assets/build/checkbox.css?ver=6e25adbbae5a5d1bb65e HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 30 Nov 2025 12:43:58 GMT\r\netag: W/\"692c3c0e-518\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykXKt4B7VFym7U2Lx5fsXIFe6pB6J10s7piz6uKSxdCePW1EgebjIrGq9sIT9qBm7A6as2fsMB6KIDSU%2BKv9rT6fZRqRo7T2t0ZzAsZBjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f60bce3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1304,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1303)","md5":"fe12a714ec08993034e5c08c53499cdb","sha1":"4da46b1ffad2f5c2e84d264cd124204d4e67bfc0","sha256":"307ffcde05340c1abe58456716a8378bb44b790f6b3e7bbc385ac43302c800c9","sha512":"ca3c138c78cb4dc59a9a783cb1394641e31696d289d6093067e96e78f35b9648f51d7957bf89a8a06561590e1d55441801ef84bbd073a404fcde84598aea6d64","ssdeep":"","tlshash":"f0215a35ed4820cf903bc295a690ee6493326060cf118f76d3a62d375bce4a66413fac","first_seen":"2024-11-04T16:15:46.741859Z","last_seen":"2026-04-03T16:32:37.893456Z","times_seen":950,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"2d7-64583172a56f8\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=25PZSw39oX8uMV0DQ6lvhOSYgNTgWZWG4tVJ4DpHOFfAAA2WnoYvCUFXmVP2XqbqWYiXxQTo1Oq0w288oh4i0ISvEYHPpUzaBYOjngbvPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f66bf33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (307)","md5":"8d37441d69ebc9b55dff2c7c214ef997","sha1":"9a292c8559131ea8838899863987ffdcfb4005ea","sha256":"93cf6e96459e42f9f656e03ec4800578dc2c021dcde475c9e5e891a7780b0866","sha512":"25e4e29eadc6a9c8b81b8e000726d8a9eea9d3378ca6faa641d5b9dcb64039ba97904fd0b2bf50a8303b7cd1194d08c80641025a635f8c3fd2ebd9217f824704","ssdeep":"","tlshash":"a201247d81022a504a8008152adabf689e99b0a6785c6f7572329c2eccf4e5961a9f0d","first_seen":"2023-04-09T05:14:34Z","last_seen":"2026-04-03T21:55:36.903455Z","times_seen":22821,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/11/11-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D9%84%D8%B1%D8%B3%D9%85-%D9%88%D8%A7%D9%84%D8%AF%D9%8A%D9%83%D9%88%D8%B1-1024x1024.png.avif","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/11-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D9%84%D8%B1%D8%B3%D9%85-%D9%88%D8%A7%D9%84%D8%AF%D9%8A%D9%83%D9%88%D8%B1-1024x1024.png.avif HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 141289\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Oct 2025 06:54:14 GMT\r\netag: \"69006896-227e9\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HoEDywskADbAJ0GYUE6y%2B5MqdRxymI6vgACZhS8hZyu%2Fh6HmCcXpYxkODBzbcgG2ofRwKAT0uT0eR3sCAmbzTjVr3kS96%2FpWyXu2%2FXJWXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600f6ec193181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141289,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"321e7f1e72227d705ce7d0ceb4b1806e","sha1":"5e7160a337856615e0bfc2af8057820e77f5d993","sha256":"361dd90fdf8845e56997bcc05209621a79a1fd9bf839e42b33d9a774648dac19","sha512":"941127b125407b7cae412fee8f162caf6c47b5308815a176b471c323eec7ca513db9b681a42e6a2302000e7f81982f5b181d7b53f71cd5b350fd158e803c749a","ssdeep":"3072:YJUVkSvZ9LXq0mnY0D3dNkzOv8g+RP6M8jUfwxqgF6xIPPgS:YJij9y3durKoIpTr","tlshash":"d2d3120254263ce6978f872534adb60468b91de2f732016632c9efc5ad998cf185d727","first_seen":"2025-12-13T14:03:51.701328Z","last_seen":"2025-12-13T14:03:51.701328Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.17","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.17 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:17:39 GMT\r\netag: W/\"69380553-656d\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BvIYoqKKRjxO4h%2FITFBkzPJlV8iwFTFS%2F93Qxn3%2F%2B%2FxQUn0Lw3QHVvYKygSPxeBjwRKRRafx%2B8acp%2FRc5OzZgKN0CW6NaaIAHbPScxzxeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f6fc1e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25965,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25965), with no line terminators","md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-04-03T21:36:03.883106Z","times_seen":18069,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-blocks/assets/js/jet-blocks.min.js?ver=1.3.21","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-blocks/assets/js/jet-blocks.min.js?ver=1.3.21 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 29 Oct 2025 09:27:25 GMT\r\netag: W/\"6901ddfd-5ca6\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MoEz4lK0Iayu0MvYQS2N2BEXak8oEKLK2%2BF9qyb8d2sejskVuZ5ydQJoAnDx68qivyV7wmIPjA0l410zNfSaMYUF1GP1OhktaI0SgTju4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7dc5a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23718,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23718), with no line terminators","md5":"4aa12f6ff0324d1b7e7704c33a01c6c5","sha1":"1c8b1c5e135157fa13d3818849fd58acb47f34e1","sha256":"113f2cc6e196e45fc783ca8ebaf1faf2d83cbe39913a2969aaa6af9051ddfa44","sha512":"6a3ba71df18276f416eb64b422f6c1c240d1d7f21b6280325af03624fc79622cc54396a67d6ff5ec0cae84176e1a8d29dbf26bf5a162fb424666c130e5388502","ssdeep":"192:/bNExzwACt9aw7jDvCLA2ehZwJTkEJTrw4b+vg9RBl6D/2Ba4NoM/3K3K74lQNFm:jNuClDvCLwhZQ9w47RUaos3IFzGJHzG","tlshash":"86b29584f3113af621ff2922515f6204a1332a3590998451b67651f82e7afcb32a7fdf","first_seen":"2025-10-25T18:59:02.125233Z","last_seen":"2026-04-02T22:07:13.619819Z","times_seen":300,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-blog/assets/js/jet-blog.min.js?ver=2.4.7","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-blog/assets/js/jet-blog.min.js?ver=2.4.7 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 10 Oct 2025 17:11:00 GMT\r\netag: W/\"68e93e24-3085\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jLcev4CYWaTQEUMxjwAUl23CxfHhS2wPH8k%2FAPuMFRFN9eLZ0l%2FbsDyumLSJt%2FKwIPIKo81SXH2YuoQbdJUmZOdIc18lRnSiIHd7XxC66Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f80c653181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12421,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12421), with no line terminators","md5":"42783cf3092a170f7290b278ba72030e","sha1":"487afe532977273722e589aee6c486c0a3df3d76","sha256":"de5ec39fef6bb350a4a5fae08a0f094c014ab947404a299c26f22ae12812c394","sha512":"d5628ad47beaed550e012223cb2a4dd50c1cd1f780de241a3e76d7f1e2c0499fd557253b770c721b90a45397e1f8bd4a9f3b2fef824b8e42e55a0aceced53345","ssdeep":"192:go3WQt9rrwcfzy+Y4ZHScSdJyneQtmsg3AhBbBCRkU7D7/W:go3WQtlfzy+YmHBM+eimsThfCRkE//W","tlshash":"4a427604b14c6ce9a1ab727620af231df03b7d66e80a84c1f936d1f50a7de8631797d9","first_seen":"2024-05-30T14:48:54Z","last_seen":"2026-04-02T21:41:52.111953Z","times_seen":1335,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fundingchoicesmessages.google.com/f/AGSKWxWw7PdwJy8VAKEs3q2ECdqtenHmKY69U-G9-6JVNoJJIzwYOjmHHLfJUQyLMSPShpryJNGFvhtEp6Aba6zu6arQADz0Hpq-sFyuaPiyzJr-SgPRmy4r2_vnaLM3zpguNu2MihXkhg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzY1NjM0NTk2LDE0NjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsMTBdXSwiaHR0cHM6Ly93d3cuZmFyZXNjZC5jb20vIixudWxsLFtbOCwic0NoTkg1T3NhazAiXSxbOSwiZW4tVVMiXSxbMTksIjEiXSxbMjQsIiJdLFsyOSwiZmFsc2UiXV1d","fqdn":"fundingchoicesmessages.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:16.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"98:61:A1:01:94:12:1C:03:5E:13:41:74:51:6D:2D:18:E9:F2:69:05","sha256":"4E:24:16:A8:D6:22:3F:BE:06:74:9D:F4:9B:CB:DF:31:D8:E5:8A:F9:E7:B3:7F:8D:5E:50:F2:25:34:EA:7A:94"}}},"request":{"raw":"GET /f/AGSKWxWw7PdwJy8VAKEs3q2ECdqtenHmKY69U-G9-6JVNoJJIzwYOjmHHLfJUQyLMSPShpryJNGFvhtEp6Aba6zu6arQADz0Hpq-sFyuaPiyzJr-SgPRmy4r2_vnaLM3zpguNu2MihXkhg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzY1NjM0NTk2LDE0NjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsMTBdXSwiaHR0cHM6Ly93d3cuZmFyZXNjZC5jb20vIixudWxsLFtbOCwic0NoTkg1T3NhazAiXSxbOSwiZW4tVVMiXSxbMTksIjEiXSxbMjQsIiJdLFsyOSwiZmFsc2UiXV1d HTTP/1.1\r\nHost: fundingchoicesmessages.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 13 Dec 2025 14:03:16 GMT\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport, script-src 'nonce-afIQGA8z6HfVAcm_qva83A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreporting-endpoints: default=\"/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjmsGoxSXF4K8hxdB68xzrVCDuWnSedRYQGypcYnUE4g_1l1l_AHGRxBXWJiD-VHWDVaj6BmsS-03WIiA287vNagfE1e5ebM1AbOvvw-YKxN-KfdnYSnzZ9v33ZTsGxHtz_NiOAnFmpx9bIRDrbPZjMwHi83v92K4D8eqbfmybgXiFlz_bBiAW4uFY8uTrSTaBD2sfTWFU0kjKL4xPzs8rKcpMKi3JL0pLTkstTi0qSy2KNzIwMjU0MjTUMzCPLzAAAMIWTpU\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2702,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (905)","md5":"39748362b9a64e86bde16f37b3c25737","sha1":"c3f63f6fed9db663aad7be98e4c03cc99cec3dd8","sha256":"39d1e24fc6f5f5c042450577e37f898a7851d914c37b3f41c4aa243abaeaade2","sha512":"2ea3fd63db7ae7b2d984b352ded5c29bd08db9f555efbd22cd26193360a0060784c84f996ceeb6c490fc546babc8ef7e9272b0f674e628ead632b9c8f3af5ffe","ssdeep":"","tlshash":"13517397719161fa0353cc22900b543a383ba03fe04991be35fadcf448f500a2a29bfa","first_seen":"2025-12-13T14:03:51.703753Z","last_seen":"2025-12-13T14:03:51.703753Z","times_seen":1,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jetformbuilder/modules/option-field/assets/build/select.css?ver=0edd78a6f12e2b918b82","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jetformbuilder/modules/option-field/assets/build/select.css?ver=0edd78a6f12e2b918b82 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 30 Nov 2025 12:43:58 GMT\r\netag: W/\"20e-644cf376ac0b0\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGwHfxjAOqfi2oOnYM96CvK7LITDVPjYjalSA3tDHdP6xISRUc4GEUAdHqQotjsqpWpxtrwvf02WtzgTfBjx0gA46J8ecMSmJgeiQQk%2BUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f60bcc3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":526,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (524)","md5":"77f20772613a41e563143f93535d9ecb","sha1":"ebda0ef2135cae2d7bbff75abe94c0814c1ae338","sha256":"a0cd513e1de7067bdb3f20224fb4705d2636b30fd52996d2675a89d88c394e31","sha512":"7eb4dec6d9b5a573fae91951b4ed924254371e44283362804161f4e1dacb6bb0db9ee5b189af68f4592582ce48e6a7e259bdada091e62d1975acfffe800df15d","ssdeep":"","tlshash":"86f059b05c722628f1bb49af18791209631fe046e8531af849cb7da7630d0fd00729a2","first_seen":"2024-10-15T14:54:26.531843Z","last_seen":"2026-04-03T16:32:37.859107Z","times_seen":950,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jetformbuilder/modules/advanced-choices/assets/build/main.css?ver=ca05550a7cac3b9b55a3","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jetformbuilder/modules/advanced-choices/assets/build/main.css?ver=ca05550a7cac3b9b55a3 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 30 Nov 2025 12:43:58 GMT\r\netag: W/\"692c3c0e-13f2\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2BnwHkm%2BbojQC6IXMHsgjsJQ49xow5bjjy9xPX7GUYxJKQbCwuGd8qSKngrqPzLLioEMoG2dYsoLCli3gW6dvFJPfxdWgCTmSOy53cORXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f61bd23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5106,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5105)","md5":"d171e55e14f3b2d20bc05a8f2d8ef104","sha1":"16f70457b23f5fec3f6fa16779785885ea9eef7c","sha256":"fa454581c52a829fc660dad52b21dd38ba9fad7b7f36ef8a03d2e64d4fcd04ac","sha512":"eb6beaf129155dca6be027b0da686c5fdd39514accaa23b93a616f2ab456804b743e8aaa4a16c0f1cb87d5e3795faeb60a8ee84c0fd88c8f5b62b138a9f76a37","ssdeep":"96:omsu5uiu8hTOB5i6ulPulwul+ur/cAW+z/imJhc0WvfhJQaHLyttL+Y6uezYPueU:7Bqu4lcbx","tlshash":"73b182fff50a643a197bb215e6587ddcbb492710a7b6a558f2e320d04888fe009727cd","first_seen":"2023-12-20T20:26:07Z","last_seen":"2026-04-03T16:32:37.868601Z","times_seen":996,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-119f8\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eSUfSZmTJwPN51VlwhxFG9kAjfIIRKjTplFlEtsg7RxxQuXZud0M049jEFYCX0ERNN7q7ACuPwn0%2BYdfX274GFUNcofQlq0ouL7KOCiDKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f66bf23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72184,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"aae648ec410260f859ac89e58a8372c1","sha1":"f7320458aadcbaa2ed94c43c8d7ddb9361d0b106","sha256":"d417b6ed49cb6ae3dfe2b0bab5d865472052cd0286a9478c74cbb09a02a56d0d","sha512":"88c7cfdc35aa5e4ecbd8023b966758f30aa7d1f5367820a1443922988c06a4a5a96fc500fab19985a090cbc85c9e2e5db63470e50fbc93f5596fee59346c3b73","ssdeep":"768:0bUiiiukQWIsjoQCSsncTpsTO3DNnYGmLN0yPburmvXnH4:0giii1IohCSicdsa3DNnYGeZPK4XY","tlshash":"d963dcfee1ff10944311e4812643e2e4f329b66cec8a4c98d2a67d9df1c165ca186bdd","first_seen":"2024-05-17T06:44:22Z","last_seen":"2026-04-03T21:55:36.993656Z","times_seen":23041,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-M69GNHF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"14:1E:23:68:0E:D0:A1:C7:ED:6A:FE:20:1B:06:FE:F9:83:B2:99:F5","sha256":"61:AF:E1:FE:D1:A6:4C:C2:5B:60:60:94:B3:7F:5C:5D:34:BE:8E:AB:21:42:8A:97:07:E7:8A:B7:2C:91:5D:0D"}}},"request":{"raw":"GET /gtag/js?id=GT-M69GNHF HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\nexpires: Sat, 13 Dec 2025 14:03:14 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 132265\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383897,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"70e960d8ae7b0942c96de1a607c8f195","sha1":"9f33bdaa6001324722d1642632b1eb63a0acd120","sha256":"a9d7c67888c4da778f3171a803c0de1a3d4fe63e1442b26846e594ad179c0abf","sha512":"431203d09c733f4af4757d7f1e0bab544eeb62a6f96983d22f2c20be1957e0100cceb3bd32107934ff325892717c45e8aefb5de316bc42534cb88883887d3ca8","ssdeep":"6144:6BIe7ma2bulKY/1u99xHDmHYmyBFzvnszmxWovPad4FpC1+T:9C8bu7/1mbrnsOWdMpX","tlshash":"618419ce73c674669396a078503f118ba57b29e2f44cc895f18acce42d746aa4237f7c","first_seen":"2025-12-13T14:03:51.70606Z","last_seen":"2025-12-13T14:03:51.70606Z","times_seen":1,"resource_available":true,"data":null}},"time_used":976,"timings":{"blocked":347,"dns":1,"connect":22,"send":0,"wait":38,"receive":22,"ssl":543},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-search/assets/js/jet-search.js?ver=3.5.16","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-search/assets/js/jet-search.js?ver=3.5.16 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 04 Dec 2025 07:53:20 GMT\r\netag: W/\"69313df0-123a8\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5IyDT4d0IfE8AJ4tUgJOjEqwLijbRSUtbRi1t0NJWtVFmcqtZuVbRv7m2Qd%2B1RctFaXUvztdFaxIm9%2F6lBoVPN9rLrTXgWN3%2Fr0FQsqh2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f71c273181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74664,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (464)","md5":"f5b0f56ce106e724539210501091939e","sha1":"00cfcd6f3e75720e47f0d203dc4c016486fb9fb3","sha256":"8d132e1f668e52a4985502655305832603d5c33298147adb8548b7ced244a717","sha512":"3c617de132570882e7c75e614ad07a3e45d0ad482cc69500a774e71a7e4ca90fdda45252bafd947e55c24e810936d42d01f22dd13ed7012f5f182e26d5d6ff9b","ssdeep":"1536:AZybdTkei/3j6PvqML+wgiqbHfjjmbws6kV599Z+seVgrY:9dTkei/T6PvqM5Gfnxs6a599oseVgrY","tlshash":"0a7374c4f76c25eb41b73065ac5970cd643ca832a408a97abc7d169027c9c6d93eef9c","first_seen":"2025-12-05T00:58:55.040781Z","last_seen":"2026-04-03T16:31:14.058004Z","times_seen":286,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fundingchoicesmessages.google.com/el/AGSKWxVY_9sSGwF0tuJWsigX0g1G5Kyhmze6j20pZBWDoNPOVHQ_RXl5wfYZ4vpPuJ8tMjva4BTFPAMIza-jVXVTMqs85thvIZ7fq4VB_747E8JCOpzzihTk_yVZUSbrhvpLdiCwGybtsg==","fqdn":"fundingchoicesmessages.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:16.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"98:61:A1:01:94:12:1C:03:5E:13:41:74:51:6D:2D:18:E9:F2:69:05","sha256":"4E:24:16:A8:D6:22:3F:BE:06:74:9D:F4:9B:CB:DF:31:D8:E5:8A:F9:E7:B3:7F:8D:5E:50:F2:25:34:EA:7A:94"}}},"request":{"raw":"POST /el/AGSKWxVY_9sSGwF0tuJWsigX0g1G5Kyhmze6j20pZBWDoNPOVHQ_RXl5wfYZ4vpPuJ8tMjva4BTFPAMIza-jVXVTMqs85thvIZ7fq4VB_747E8JCOpzzihTk_yVZUSbrhvpLdiCwGybtsg== HTTP/1.1\r\nHost: fundingchoicesmessages.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 183\r\nOrigin: https://www.farescd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":183,"data":"[null,null,null,null,null,null,null,null,1765634595737,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,[null,null,[2971971265021606]]]"}},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: https://www.farescd.com\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 13 Dec 2025 14:03:16 GMT\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'nonce-J_AiID39Pj3O6TCyvUjMEg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist\r\ncross-origin-opener-policy: same-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreporting-endpoints: default=\"/_/ContributorLoggingHttp/web-reports?context=eJzjCtDikmJw1pBi-FB_mfUHEJv53Wa1A-Jqdy-2ZiC29fdhcwXivTl-bEeBOLPTj60QiHU2-7GZAPH5vX5s14F49U0_ts1ALMTNseTJ15NsAhuutFsouSTlF8Yn5-eVpOaV6CamFOuC2EWZSaUl-UUo7NQykIqc_PT0zLz0eCMDI1NDI0NDPQPz-AIDALi_Ouc\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/google-fonts/fonts/cairo-slxvc1ny6hkvangtzmpqdkhzfh5lksscqyys4j0.woff2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/cairo-slxvc1ny6hkvangtzmpqdkhzfh5lksscqyys4j0.woff2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.farescd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30596\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:12 GMT\r\netag: \"682e087c-7784\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GblBlEbcH26KDPCxdMjpBmulYoTcorSiVggInfRIvc0eyefpLABzO98M3daKzwR1j6T3uS8%2FOhWLp4T76qpp0SNVvcrV15IDPfg6MpxD4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600f5dbbd3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30596, version 1.0","md5":"cdfdf6997ccfea7171e17593b08e3dbd","sha1":"8bcfc0fb78306b10459da6670d17221fd1a0132d","sha256":"60d51fea6669a866e3dce8a8583978127ef1808feb14c073b2f5c2a05a45908c","sha512":"552d69f3462b6a4e843908851fec19f877c50fd26a73b099b0587ff7038dc84f66cac2f734092c601e1be11016003c90b91607dc3f3f41c3d9bbc84d017c85bd","ssdeep":"768:HIFazUmkqyKA4gVQBLTtJkTWbGfHRMzu6DWWxk0JNv/rUrI26kUEOF:HFQjF4gWLwTW+xyu6DWEJrUrI2YE+","tlshash":"85d2e163a80f3cca699551bd9e4f57bfc6da520d2acfca905d85ece40002de868219df","first_seen":"2023-05-03T02:35:35Z","last_seen":"2026-03-26T12:08:59.850785Z","times_seen":1287,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/cache/background-css/1/www.farescd.com/wp-content/plugins/jet-popup/assets/css/jet-popup-frontend.css?ver=2.0.20.1\u0026wpr_t=1765640658","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/cache/background-css/1/www.farescd.com/wp-content/plugins/jet-popup/assets/css/jet-popup-frontend.css?ver=2.0.20.1\u0026wpr_t=1765640658 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 11 Dec 2025 18:52:16 GMT\r\netag: W/\"693b12e0-4c86\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9F4URZumc69gwt%2BO1V09QMFAc3S4abR8tlg3XIahkTm%2FSfReR5GQwXdECxk4W4SeSDSfyQNbtBHmOtk7SQ%2FGIY45POM3f7i0ZOgKRyAxvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f61bd73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":19590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19590), with no line terminators","md5":"82a007c325fe9196df2efb5494453a39","sha1":"ad4294284684e01423b7eecaab81adcbccf2cbee","sha256":"a91ad00d13661796ae9fe11a58d468003ac0bf9f9066d5db383ec94622153980","sha512":"edb8839cb6787d63ef00bbfa70083dd578ddbbc19dce187420b41090425e8ce74b54ce34a158325a4ab209e708f5b5cfbb6e0a34a78c776899729378c9726d6a","ssdeep":"96:xliTJXuPzh7osPcPtnNaPNodc6cPV+pcozcZly1K3kBeQQOYr06AY8XAK49k3IJ7:eTduPL70mAEkBeYqk3Ioz6APh66PC0lu","tlshash":"0392dd1212b03634a40f5f24ff894754c212a0a6fc13ddf4a54164f48adbedae67d6ee","first_seen":"2025-12-13T14:03:51.708341Z","last_seen":"2025-12-13T14:03:51.708341Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-blog/assets/css/jet-blog.css?ver=2.4.7","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-blog/assets/css/jet-blog.css?ver=2.4.7 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 10 Oct 2025 17:11:00 GMT\r\netag: W/\"68e93e24-1c2f8\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uGgXHARy8bNuTDpfIqPXOuhQ4WF3fsK9%2BlaQPQQJfAgM4jhYe4LL6egfgGV7Vc%2BXe%2BTabwKoALnquY%2FSFjvxKRl57ikrUasb6ayTJ6Mc3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f66bf43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":115448,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"65f186f82461602f11e146f6031572fd","sha1":"d36634be7a1eafb458180ec2a2f876aa5b7701e6","sha256":"b3e1832c93deb991d026e41710eb51effc60d0f4c3c85ebbb3571468a75455d9","sha512":"085aefd624a761ff223a916ed3abe923fa82ee1f8724bf73c75da145dc04c504274847e57849ac51f378ecace3bbb361ba2b27d74babebc9bd8563f896b59ec1","ssdeep":"1536:GvNDN/F7klyDTPA1i2SXHn/H6Hi8gqT6BXVaOzsicY9swo5OlDlNe1rPaykwP7da:0YRNBT1q9VBhvqxdJt4","tlshash":"38b339136b207eda314fbd3b61f8e38cdca988474d2644d6b7b982bd4b0764786394e4","first_seen":"2025-04-07T08:11:09.177179Z","last_seen":"2026-04-02T21:41:52.085447Z","times_seen":1029,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.33.2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.33.2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 04 Dec 2025 18:47:25 GMT\r\netag: W/\"6931d73d-e89\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H4PEsyWso71gTuzKHMghHNiCZASncpaNbbI%2B8SLN8NCHUAQQPZz%2BfrOONHs4%2FlqkjijQWgiahZQMFAaiN5131EBkVIQ7pKMgOLDGRhzdJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f76c403181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3720)","md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-04-03T22:32:40.202467Z","times_seen":44394,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.33.2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.33.2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 04 Dec 2025 18:47:26 GMT\r\netag: W/\"6931d73e-1868\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ylvz2NLCJpqIUCAwRe43k1TVW9rOWjpaf7MRW0K0FcncUFqQPfJ7A2SsSmvXvJ7aAyDIlv9r6OlUamZgZqsZ4%2BPmLoGGkV%2FFYGuVzWh5cA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7bc543181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":6248,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"7cf4ba1658762a0d00664493bd4cfd9e","sha1":"57b7d7c42264626e992329c79806e5f0c7131433","sha256":"a063a33a2506a6557cb968743f6e47d713156770d21c8d8ffce9bc7f17605f28","sha512":"be3b11b244254ae6383d587a097e83e99f33f639db381c202c6196c7a6658dc212b16500482aaa622c14f2d9e5454e9ab89e0a4203f2f7c13e644a120d4143e7","ssdeep":"96:B5fNg2SXdvjUq7VbocvCHHAiam4NBEPnh3CDjl2D/VTKV47YQGLo7cu8k2:7VNSXdvZVbocakNOPEDe/QOkQQbk2","tlshash":"fdd153980a589e2f26e13ad8b0976b701a3dd0723c19e991e651eddc18f8fd143da932","first_seen":"2025-12-03T18:56:43.394859Z","last_seen":"2026-04-03T22:32:40.221665Z","times_seen":5533,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jetformbuilder/modules/option-field/assets/build/radio.css?ver=7c6d0d4d7df91e6bd6a4","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jetformbuilder/modules/option-field/assets/build/radio.css?ver=7c6d0d4d7df91e6bd6a4 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 30 Nov 2025 12:43:58 GMT\r\netag: W/\"692c3c0e-4b6\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1GyU%2BGqdUs7gxTW%2F9qPJWN0qAsq8Vj9C%2FThhUUNWVdLnmEiS3zwQkmZsFR%2FbKu1UhrY4%2B5urM754KveVSUA163KsQAKOjQ5gVhQp1qxR2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f60bd03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1205)","md5":"6a448ea83575a7a78e3103e238a6773d","sha1":"68f0741f2eadc8414c3c4ca00a0776efa89dbb55","sha256":"fe532f80c03dc8d531b1751982dd39b400dfb6f6c7438a937fba9015eab55de5","sha512":"163465b3add3a765c0be549bab7b4de1e632ab6672b65dd2ed033d7213e6b791f9b774461ffc91c958782a981551b046bbe09d7350034e5c5e897ddde739f930","ssdeep":"","tlshash":"04216d66e94820deb027c29ba699dea493635061cd104f76f32b397b531ac766012fb4","first_seen":"2024-11-04T16:15:46.744674Z","last_seen":"2026-04-03T16:32:37.917323Z","times_seen":942,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.min.js?ver=2.4.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.min.js?ver=2.4.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:36 GMT\r\netag: W/\"6938058c-26ba\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XnEBBzAkKLJAXpuAzOvWy%2BVczwzgk7KGAtauU659mUW0OC%2BHgeThjNMXlHspXlJN53nJYkw3aCNAfHJkIvIQjC%2By9ShScrgZd9a%2Bo%2Fpr1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f72c303181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9914,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9875)","md5":"c72f588d7841d08871f6f57b4bef5822","sha1":"70e2ebaf419db6a336494abaadb97a63092a4a8a","sha256":"f429d68fdbafa7014fe049bcae44fdec1e4cdd61c9de788b79c1b0bb57999188","sha512":"8d6fbe7d0e1b9b6c98c8970fe3f408e180b609119801ef06292fd00e54873a3f8819ccec1c5a8efe7f9e6a7266abc8f7f384937fd070686458a6dfd0cd33b29e","ssdeep":"192:VGsTXXwzaX5BXK3gletr+YMC9wqBxFIGxKL8xsktddyKqJ:Vq3uyaYJwcxFDxK0sktdsKY","tlshash":"a6128686f291a54901df51b2817ef20a5b72a1447d23e12c7df9dacbdc24ecc6123af4","first_seen":"2023-03-07T01:17:48Z","last_seen":"2026-04-03T21:25:08.023834Z","times_seen":3153,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:16.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%224fad347d-d169-44eb-822c-a52188089546%5C%22%2C%5B1765634595%2C738000000%5D%5D%22%5D%5D%5D; _ga_1G95R5YDNV=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0; _ga=GA1.1.358228018.1765634596; _ga_HVTEJNCQN9=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:16 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: \"693805d7-2121\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LB5yZaJe0%2BJGFxpqaBDaHaNSIDtt0crNohoy79phydIaOwqLBsQhcliCSlXmOCvnC77Hta25MZVX84fkB4j7wbMcbpynUjbUM8irm05NqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad60101bdd63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8481,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-04-03T22:32:40.114182Z","times_seen":71860,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:15 GMT\r\netag: W/\"682e087f-3509\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MuKECbhYAtQWygQnz85r%2Bp0Tb%2Be8POnt%2FuSJcJBtvj0bgPOVFUEGIBU5%2F%2BfbgAyCBFCYHhCyAE8xGw7Ukj%2BZFHE2Ctz9l%2Fij6C3YJOuN9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f6bc073181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-03T22:31:12.915101Z","times_seen":637585,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/wp-util.min.js?ver=6.9","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-includes/js/wp-util.min.js?ver=6.9 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:15 GMT\r\netag: W/\"682e087f-592\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBDl4BLHPDCXj54yGxSXbAMeRo8kZJ79iDM3DQHs%2FwPjzMruSgAgsiPnkz06lGtVvOllcq9XBJf7HBAS2oF%2FxoCffAzESQHmgraIoLrn%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f70c203181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1391)","md5":"19d386c9004e54941c1cc61d357efa5d","sha1":"0a77594006c8d86fdcc0adbc2b9aecaef3869586","sha256":"3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95","sha512":"7811cf6babb4df41707f97d1bd65337b5ad7aaedff301fcedb90fb7773fa9876f52458aa03a576910f6126384599ef25f8de76ee309c22e1914d9cf444aefb6f","ssdeep":"","tlshash":"ed21795a7175a9f311333479c23f0207f332e4145a168951e489c4f19d70d8be5b7a19","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-04-03T22:32:40.089989Z","times_seen":97006,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-popup/assets/js/jet-popup-frontend.js?ver=2.0.20.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-popup/assets/js/jet-popup-frontend.js?ver=2.0.20.1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:01:59 GMT\r\netag: W/\"6925fd27-8bdb\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKL0dIC8WSFmsDi8SHWDPNQFwt%2BuafzPqsHaB2L%2FM1llCeiwrcDZwq6291km%2FdO0ZyRyvcT4%2FtKTbDcnZN2gtBhEPpMUR9kPQWfs79BwlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f76c3f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35803,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"881014cdbe31c3b3442a6721466d01df","sha1":"c9fa7a7f2cb6efb2fcc4d3a57d0f3257a41b891a","sha256":"d48f54b0eeac5d37281117f1f779bf979eb54777fa19c1cd51cf4b2ca07214d6","sha512":"d978c16fb2b9e580cec320668dd233f753999e06d3eb438e7f993d261173493018c8df76c57b491dcc8af399d10f0e3c385229195f1dfdc34020f78988c5b09f","ssdeep":"768:nlXFFH3teupgkThekfqudV6q2N+Hix0XbL6LBL0WIV5hg1ghA1Bh4T17mZaqQKmN:lVFXteupgkThekfqudV6sCxcL6LBLG","tlshash":"c7f20dc0e7edb063456fb129dd6ea2de613c4032b8154cbbbc5c694427c096e8b99e7c","first_seen":"2025-10-11T11:23:23.342973Z","last_seen":"2026-04-03T22:06:03.384379Z","times_seen":530,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-menu/includes/elementor/assets/public/js/widgets-scripts.js?ver=2.4.18","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-menu/includes/elementor/assets/public/js/widgets-scripts.js?ver=2.4.18 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:39 GMT\r\netag: W/\"6938058f-22bb\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6ERz8IL7rH7MnA34No1FIQ%2Fl3EpfoHWhQhKw8JYIOPq3TNLyZYjAM2TB4ghYV%2FMT3UZHpFQajXrfuWlPVc6qS%2BsIaobtQkeNGq3nl%2BU9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7ec5c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8891,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8891), with no line terminators","md5":"326a7d77d6d424f1232d5bc7b7fed888","sha1":"81848bab16bef748e2cef137eef51faebbcac408","sha256":"18a18554734083facd2f1dd46c2ecd456c669d55c14644cda0a0f831ad8a1aed","sha512":"956b7eb446a11bd57ffb140841842f5fcb822b76b0150fa281c9be3ab435f5ec2c3930e0b489f920d06ad1629a4c7d83285c3c863ff927893359c6d2d0d62ffe","ssdeep":"192:zYqjpvaWx3c3c3v3u3c3+3D+3h0sFTB3uYfGxB3yNz3N/31B3yu13MagMC3Q35+3:MqdY8FuilaaBF0e3xPUZf9","tlshash":"8e02b644716019b710dfbaae10cee11d87d347a5f92a8490a1b540610efadc6776ffce","first_seen":"2025-12-09T13:52:02.169339Z","last_seen":"2026-04-03T22:13:31.484497Z","times_seen":337,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.14.4","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/peel/peel.css?ver=1.14.4 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 09 Dec 2025 11:18:36 GMT\r\netag: W/\"3d9-6458312b0ec68\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=boHvC3KZu%2BqvJVJzj9pRGgwFiH1NWS%2F9VwEmklkZ8d5tfchMCjhd79A4dXPoJSAmaU3t%2FiJ%2FhDFVY6HPHOU5a5uTPeyBNNnpRlg5DavvvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f5fbc53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":985,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"da7f0f6aebde50c1fb30935d025f8cda","sha1":"5bc63aa29c8c96aa696d077f2c5ff5dc47f5e2f5","sha256":"e09469635efc1842145e3fdbc2ae86edef9748bbd9751eb3cc6c532a997b2f3e","sha512":"c6b91abbadf40794f1beadcbca4d5aa9f12586666271a56ac7f8f350ea7690b33168c2f8c9b157cce6473e2108c7691e3637440bba3e1571bfe7cfd9809e016e","ssdeep":"","tlshash":"b411ab984fd32112740ad2ba0ff966288239d047dd5bde9937a1a250cf49f48adfd284","first_seen":"2024-03-04T10:41:32Z","last_seen":"2026-04-03T21:25:07.927185Z","times_seen":1701,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 04 Dec 2025 18:47:25 GMT\r\netag: W/\"6931d73d-5e2d\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVynyEYzoKM3dMUctkrntxifQ4IfuJcztuwBEMhlrZuIIx4r57x9DsXLPXhdB111jaUD%2FEDJlTnPE55OBr%2Bb49Ekcp1yo%2BDc6meyzbADxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f77c423181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":24109,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24021)","md5":"9e7c898d1649315173db5d2d8730fb75","sha1":"364a6836a90b28329404b7d7f58a524861ef63f5","sha256":"f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552","sha512":"4ed0541755c25dd9afbf9da3b64ac082a2f7119720e4b8a21fbc7cb302278aa2d2e15d0e3f735f14a9913a38508c85c45b3df22922609adfe551541396881601","ssdeep":"384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym","tlshash":"e5b2b4ce314174a386eba1f8512f162652336466e20649dd7c3faec55f28e6931b2f3c","first_seen":"2023-11-22T22:20:37Z","last_seen":"2026-04-03T22:32:40.137531Z","times_seen":66799,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/shortcodes-ultimate/includes/css/rtl-shortcodes.css?ver=7.4.7","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/shortcodes-ultimate/includes/css/rtl-shortcodes.css?ver=7.4.7 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 01 Dec 2025 15:33:56 GMT\r\netag: W/\"692db564-456\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSWXrm1eFuZdsqlbVbRm4QNrMKatVXcMGXtxSY68bS6tqA2nyInnUHC5bYlJW9zrjF1UCazLTSvABHdl%2FCzeYWkUZN%2BNFda5Mwngd%2BAjJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f81c663181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1110,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1110), with no line terminators","md5":"792b455c4f5458d3cd5bcbc67d9b23f0","sha1":"ce886d8f38e06180b345cf3b01afc8fa23e963e8","sha256":"fbee4cdf021c2d2294ead13e0cdd7a5d51e29e6b0683a11c3d360ca7d7d09445","sha512":"0a38504b455b7569b21262ee5c4737db0844b468c03aa3a951fad3236d3184262c9802d75aaad1cbc406b47d11925615973d456d4cef3c04794d16ef917dd162","ssdeep":"","tlshash":"4b11aa024cf340269a2ed31bc4c014a433a1f6aed3e7a3cbe547d902cd00ae90c76c74","first_seen":"2023-04-11T14:28:48Z","last_seen":"2026-04-03T22:26:35.122876Z","times_seen":148,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/06/cropped-Logo-Fav-500-32x32.png","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/cropped-Logo-Fav-500-32x32.png HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1470\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 21 May 2025 17:07:39 GMT\r\netag: \"682e085b-5be\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQfxUzlkvodQTUgAK9NVIuf%2FOstiC4vJhrpblI0BIPj73IiZUVTgDYwtxybO39m%2BJgG0goyv8tdVoTQpIXe0FDVE%2FNsUBAzgkORbo7bQ0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fd2d113181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2eea7baa62a37f90f13b980bce2a6c4c","sha1":"ad0ab660e96d53e235ac3b89be4d99829270be30","sha256":"4bce69d2e8b6570317ac35fd816c62a53688a63bb5a4c2ad6493c4580807eac8","sha512":"7086b45e5477bc95287b2113798eee4a6d1add50368be7c8621deba4812e4741702f8739b2b24bfd5fc34733eac2e1ff035d0eb199a3f47cadfe553f927c42b3","ssdeep":"","tlshash":"753119d719a00d89cec124902bb0748cca1d6d067559c0b0abc9bcb59f49ab9ccf9a0e","first_seen":"2025-10-24T18:33:48.401157Z","last_seen":"2025-12-23T11:53:47.344951Z","times_seen":3,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-684e\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXDUA0HnYIasSu%2BvYk46Hm8NBj3bL9ad4UXtwJdPZNdTuphd609ZDufBqS2dOdO4kE81KD0nBmDr5prw0iZIHl7xnMQcp%2FEiGHBW3nwDMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f60bc93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26702,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-04-03T22:31:34.483668Z","times_seen":60310,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/css/widget-image-rtl.min.css?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image-rtl.min.css?ver=3.34.0-dev1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"d6-6458317272e60\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2FDp2wKdABDDxgfNc9Pr7Y%2FM23kYY1Imgbtnze1OvbspzrcsBYRopX6vOif%2B3RajAO3D9MBZ6dNWp0I94uXOUdB2SshCSfoUtQhh0RnIRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f63be13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":214,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-04-03T22:32:40.121588Z","times_seen":54001,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:15 GMT\r\netag: W/\"682e087f-15601\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMsrRuKayd%2FSbnGs2pwKwzW17IDwHEQbzb%2BoAxjQ4kuZ%2Fqmd%2Ffoh6a19P78%2BuLxQ3QRjtIEwHuIJFy7nojRas2hw3mz5HkfRTSemFGf40A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f6ac063181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-03T22:31:12.901944Z","times_seen":683995,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:42 GMT\r\netag: W/\"69380592-22bc\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3t7nlNF60AvpNf0dE8uZHyvknyaldFxkJNPGglq6rRaz%2FHafJ9MGk8TLjpM%2Fmv6ugStqwK9rMPbH4s8PMcgdgyE%2FifnWogVM9voF3L8b0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f81c683181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8892,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8892), with no line terminators","md5":"fb15a10a641a318f91e7e912e4f9c184","sha1":"bd41f67233facb96976ed7b8e7207d52c03d340e","sha256":"f40767552e5e94b2d5f9a65d7f640cfa7d225298023dbd682095e040809a3d1a","sha512":"49570d36e5b1ae3c3a4965f7d054258ff676326bee0d9399aa990926e9a762f699de1d09078debadc43b363ae51d740ba33f2e8c64bb223a73d3c62872ebb3d2","ssdeep":"192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY","tlshash":"b60233487946746b3973f0f6218f02ca353a24426ced6854a6e1f8e82d7858d1463f7d","first_seen":"2023-03-07T01:19:39Z","last_seen":"2026-04-03T22:36:24.518877Z","times_seen":50639,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/thumbs/%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-r658izgt3mpc7kdkftyx1xwcnpt6hkho9gyfmuvxa4.png","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-r658izgt3mpc7kdkftyx1xwcnpt6hkho9gyfmuvxa4.png HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 2145\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 May 2025 17:17:14 GMT\r\netag: \"682e0a9a-861\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NyivkJmRwakf1UL1ZdQY%2FXBJnBBtSqtXL2rjYbKJ%2FuHVBECbB8ra%2F86QrLJQO0hzAWV7FioD5pZ5UK3ohChI4sH6vtbzJ%2BnYqGKXGHyuzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fe0d373181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2145,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"2c7dc13a26047ac50a65664ea6ba4a56","sha1":"380d56761415a98d9e07605c6b8582c78ef0076b","sha256":"a471a3485a3556d60ada9e425d9a106e9033251b94ef9eddf22455e5776fffd1","sha512":"f063c67af9041c677c7db947ecbd71d2358211f6d0074b99bc39d832d36d470c8c903b07f7509873266283d2d999933137ad3a3f4b7f09129e3422e119eb2902","ssdeep":"","tlshash":"73415ec9e293e176610118f3717a4aa6dcf65f142482812d4179a5c8ce074d9cd7acff","first_seen":"2025-10-24T18:33:48.467338Z","last_seen":"2025-12-13T14:03:51.719672Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=9.10.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=9.10.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 17 Nov 2025 18:53:13 GMT\r\netag: W/\"691b6f19-2e76\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s8BwuzUd1P%2Bq4iWEUoVu3tVM1cEIALC3%2BWk%2FrxA5cFf%2BE7UY9kU3vL4RqMfUAORv5a8wVsDCpnBf4nSnax75o%2FXyQix7FZ1y%2FFetdOat3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f6cc0a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":11894,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1392)","md5":"c0b1556b9e1a9994fd779ceaffe12c9b","sha1":"dc70ce7fd7c058bbc47e8d8534014c0a12ae1885","sha256":"7790882b18f7b3e10750f4474dc1a13150a2ef8510ef4c2e3e52c5d5f776db87","sha512":"7ae00741a4a60920ef95fedeb573f6ef901470fa77d939b8a8a0dd4559492c2e99255ad1ee18fedc12abc02fa132474dab07f7583e3876ce56fe41c9c6699fd9","ssdeep":"192:mkgHygW0Je1ZZe1ZfRWrL41QRPHX+JsoMMCHAN1BmooMBA1TBmQzqIUg:+HWfrL4mNwJalzdUg","tlshash":"5532b69235dbaa274be7aa30cae71307f061239354840d80d6a09c66b9719df93ddf1e","first_seen":"2024-10-23T16:25:18.937413Z","last_seen":"2026-04-03T21:51:49.252306Z","times_seen":17925,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-elements/assets/js/lib/anime-js/anime.min.js?ver=2.2.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-elements/assets/js/lib/anime-js/anime.min.js?ver=2.2.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 29 Oct 2025 09:27:26 GMT\r\netag: W/\"6901ddfe-3854\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D93IFpq4yIQb9CiTnvaXxpB1zxaJ9Hq2%2FQidOV93SIJssdQvTMLN02TOSHzeYGqdI7WZDDVlUlAMBuH7psq2ua%2F7YwfWQlIniQEfmDfJGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f75c3d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14420,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (547)","md5":"7b7d9c2344ec7bb776c95e6d9144470f","sha1":"f9e83481831a2618b30e8f38471ae8d16c2a6f21","sha256":"06ec6b51daffe18a33b502f14fac6674eea1490c3677a06d054635a6d78676ce","sha512":"5fc9592918dc54d8814979fb3cd7489dc82ecd7e2ff2978a22e0fd0e935026a3a62ab1f8285bd89030587498a46019a0872a58490fa706572526c0027c385a2b","ssdeep":"384:xGUErMWrjas1PslwqyfSFBxE4YZxOZHXxu:xGgWHXRPIBCVZxOZs","tlshash":"d45295cd72e2f2a2c2536d76c16f610bb73a6ca1e50ca8a0d129d0c07d7062e4677f6d","first_seen":"2023-03-07T01:06:51Z","last_seen":"2026-04-03T22:06:03.512446Z","times_seen":4219,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.33.2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.33.2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 04 Dec 2025 18:47:26 GMT\r\netag: W/\"6931d73e-ace2\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75uI23rS%2Fy%2Bkp5GZwzejUhjOI%2Fh8B2hmGSKqY94ebRnC92QkOxu4x9z5NHJq98KzEQbM4y1PDzi4uzns5O%2B6ywAwxo5ptHaF5%2BZaj8ZmAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7cc583181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":44258,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44214)","md5":"3278462198d5475babe77e4cbc6b28cb","sha1":"e076801f8d36ea624233afcf2eb5eeda610fc6b4","sha256":"6f48b5e219593823b40ce245009db9ec8e25a9fd0f0eec54faefd7d3d8580a3d","sha512":"5a00495bfc63975e3881ffd64c2929c4efd151b29fe047f7b2b30af21142ddcabba2a3f9ca4a02eb6badc4235b69ad9b5c910804acea3d57e740a1c668b8382d","ssdeep":"768:T/Xt95D1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdiePm7La:rtDD1+WE9A5yLcWJ9mBtIoERuWfRMBK7","tlshash":"1513955171aaca2941cf84abf463164fb7225c9cf413f0e67afc8d82b564e87a390731","first_seen":"2025-12-03T18:56:43.429947Z","last_seen":"2026-04-03T22:32:40.120937Z","times_seen":5526,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/google-fonts/fonts/cairo-slxvc1ny6hkvangtzmpqdkhzfh5lksscqyys4j0.woff2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/cairo-slxvc1ny6hkvangtzmpqdkhzfh5lksscqyys4j0.woff2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/wp-content/uploads/elementor/google-fonts/css/cairo.css?ver=1736346710\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30596\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:12 GMT\r\netag: \"682e087c-7784\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVYE%2BnfjLWIlrRH0SpnrJzUxicoXHq3a7RjlSERV9Utb88BuQYnKj8jwaTAmv9ICZ9h9HMi7LJ864Ev191OqrKmV1gnX7PV3OhTpfrIb7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fc3cee3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30596, version 1.0","md5":"cdfdf6997ccfea7171e17593b08e3dbd","sha1":"8bcfc0fb78306b10459da6670d17221fd1a0132d","sha256":"60d51fea6669a866e3dce8a8583978127ef1808feb14c073b2f5c2a05a45908c","sha512":"552d69f3462b6a4e843908851fec19f877c50fd26a73b099b0587ff7038dc84f66cac2f734092c601e1be11016003c90b91607dc3f3f41c3d9bbc84d017c85bd","ssdeep":"768:HIFazUmkqyKA4gVQBLTtJkTWbGfHRMzu6DWWxk0JNv/rUrI26kUEOF:HFQjF4gWLwTW+xyu6DWEJrUrI2YE+","tlshash":"85d2e163a80f3cca699551bd9e4f57bfc6da520d2acfca905d85ece40002de868219df","first_seen":"2023-05-03T02:35:35Z","last_seen":"2026-03-26T12:08:59.850785Z","times_seen":1287,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXgc1nY6HkvangtZmpQdkhzfH5lkSs2SgRjCAGMQ1z0hOA-a1biLD-H.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:20 GMT","end":"Mon, 16 Feb 2026 08:40:19 GMT"},"fingerprint":{"sha1":"6A:E1:8A:53:22:10:0A:EA:D5:8B:52:AB:88:89:E1:9C:72:AA:70:85","sha256":"F1:22:A3:0F:EE:FD:45:B1:E4:FA:14:E9:E4:1F:83:3A:81:45:61:0D:5D:82:48:E5:DB:D5:5F:95:60:4F:8F:DE"}}},"request":{"raw":"GET /s/cairo/v31/SLXgc1nY6HkvangtZmpQdkhzfH5lkSs2SgRjCAGMQ1z0hOA-a1biLD-H.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.farescd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13292\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 12 Dec 2025 19:11:30 GMT\r\nexpires: Sat, 12 Dec 2026 19:11:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 67905\r\nlast-modified: Tue, 16 Sep 2025 03:39:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13292,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13292, version 1.0","md5":"c8429fd458d944f37c90d1ffa0ae0887","sha1":"de12b769124cdf1f5118ecd818d34265c7081e20","sha256":"1b36945f5f6a3d1fed3783999b887d0c56cfd66a41a04212a28aa79abbdff0e1","sha512":"f17d6d5f2acc96f78d599b6248a6e20cd2e24b3d3a5a154761d016ffce647f13bf35985beea40aaeecedfe850f2101ac3551074bf6567e8bd0227eb73fd143b6","ssdeep":"384:fEh+1HraMQEnkcDalUIt7dY/b/M4TMDAeko6nxLteOeo:fEhyHWMzRSt74b2LXOL","tlshash":"2552d0832ba0b471d1e9a836cd4ca1c29233f16e05307bc57158b36c76d6f9ccb96a92","first_seen":"2025-09-17T13:57:41.167524Z","last_seen":"2026-04-03T13:45:56.505784Z","times_seen":261,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/11/06-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A5%D8%AF%D8%A7%D8%B1%D8%A9-%D9%88%D8%A8%D9%8A%D8%B2%D9%86%D8%B3-1024x1024.png.avif","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:21.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/06-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A5%D8%AF%D8%A7%D8%B1%D8%A9-%D9%88%D8%A8%D9%8A%D8%B2%D9%86%D8%B3-1024x1024.png.avif HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%224fad347d-d169-44eb-822c-a52188089546%5C%22%2C%5B1765634595%2C738000000%5D%5D%22%5D%5D%5D; _ga_1G95R5YDNV=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0; _ga=GA1.1.358228018.1765634596; _ga_HVTEJNCQN9=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 134492\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Oct 2025 06:58:27 GMT\r\netag: \"69006993-20d5c\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WC0QtTwTJO%2BKxtaQgDudKSY7U81vzUGBbULBdbd%2FYCQeBn%2F8ENDxcTgl93BhbJiWSBtyAKlrxdjcpjStncmnJE%2FFpGCxN3EXF%2BVdbdyxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad60125da1d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134492,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"ed7bb6835f6e1f529e4a4484c418f242","sha1":"025a56a0487388940f5f9271c21f632596299b3b","sha256":"6f2659cd8177490d72a56f613c4e3fcaef944fc1d6e2af30abb5f7dc2f00fb30","sha512":"9fa0ea365b2823446086cf1f1faf4a1cfb2545c1496dd686197f2714ef053d4da7f284faa88eb5b16de3b29b13273bea745d0661ba459975234b0e4365152bb0","ssdeep":"3072:kGaIFcMOmgiWtZbJF01tEa88BtHFOE5r6:kGn+M3gjZbkbvvK","tlshash":"84d3127b7aa18f05f2cec56c1123ea3497f064ab6f076c02e8cadb997434d4215adca5","first_seen":"2025-12-13T14:03:51.722863Z","last_seen":"2025-12-13T14:03:51.722863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/astra-addon/astra-addon-690ca36fe8d717-47495406.css?ver=4.11.11","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/astra-addon/astra-addon-690ca36fe8d717-47495406.css?ver=4.11.11 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 06 Nov 2025 13:32:31 GMT\r\netag: W/\"690ca36f-3a45\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0%2FyUkeN9IAFym7AlT7iVS5luRvomK3ScT6zotVRjq6sLs2wxYBFsiTvVnwF1omgdD%2B8YJh02Hkc%2BH%2BVwEztKZVO441yCcEoJqb%2B%2F2TpxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f61bd53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":14917,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14917), with no line terminators","md5":"3bafe1c144a355c3f4f8c6e42951bbab","sha1":"2be38fa5b59d706c1e0410c43100ba87381ba51d","sha256":"aa37f6d746af2f9dd1c3d064380476683298f3c4f9c22f359f29a13874acbc4b","sha512":"5860bf222431270f4a65f04cf58a458f1ebd79b6aeedb3d851df91d3c5390f8be5cfaa69c976475497ea4f8a7e4c2140738701f236858a2754e253566c11b14a","ssdeep":"192:9IfIUI+WEACq4IsI7RjA1p1g5+xwiVIE0glh6gHti1BfO0FB3y:uXNtL","tlshash":"b162335357c535053036ab33f086bf1877745773be2e278bf1b9811a8aebf5840a1a4a","first_seen":"2025-04-11T18:19:04.259788Z","last_seen":"2026-03-09T03:02:49.226987Z","times_seen":21,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-search/assets/css/jet-search.css?ver=3.5.16","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-search/assets/css/jet-search.css?ver=3.5.16 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 04 Dec 2025 07:53:20 GMT\r\netag: W/\"69313df0-1f3b8\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BLyOTPuVAYXBvRdMri%2BcM%2BByvu5ToJV4M19Ydr2FE5UkF6ACkkjKMNcfHPSDPIrtY61VyEPX24sNgPwW6aXVcIU%2FfQap%2FnOJjTJky0wDGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f6ac023181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":127928,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a2e25095f758448718f0588603c755ae","sha1":"9cd1f66d8155f1b80cba8bb29ad2f2e5bfe0853b","sha256":"dc4b5bc2c02cb2bdcaaeb7537d7ce5eb0837a52a70517000026c2691fbaeca89","sha512":"cabd03b15b4d9df3702cae90c860bc39016419d188320cd5f1f5210f3b43d114e26074a22c7de1e8bb7cd8bd87616727f1c2894d380c6e3308eb918e31825311","ssdeep":"768:tZL6DPXiYz7h3/wY9mDcSuXDB0xav7fGhaj2hdpg7NOt3prGwQYL9z:K7h3/wY9rv7q3AwF9z","tlshash":"3cc346572a781fabb472c4d03e44b947c1567c827e3486d4bf1684bc64c7eece0aa6c9","first_seen":"2024-10-06T08:11:05Z","last_seen":"2026-04-03T16:32:37.960652Z","times_seen":1344,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.34.0-dev1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-162d\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2RBeXRlHJoQIxZlpsUrD7cBLyxn0CyoIGoTeVDhUNV9D7Pqrinb9yJF3BzceZc0GvfzUI%2FCjGAetru8iMmkOkXEAQw4KlpVHOK3wyO7xJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f78c463181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5677,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5677), with no line terminators","md5":"8677d8dfcc987f7d42b832b5ec35587d","sha1":"471ad10036d5aac3064d12441eeaffa05340e4b5","sha256":"b4bbbeb410140adf0ad76bf74e2a6525427e7fd867020599bcce5ce6c724646e","sha512":"ff8c780d9d829ce12e12f10f88fa2b4d970416aea6474c0465e184d78d19e2bbe450869004403e5bf958b394834998ac4d7ee037fed8a2425a92b994581997fa","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5p0m4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5WmH0IW9v7G/2","tlshash":"68c152941694fd2b21e139d8e01b9735252ec1373c1af981fa32eced54e4ed183aa532","first_seen":"2025-12-12T23:30:14.897515Z","last_seen":"2026-04-03T20:47:57.100244Z","times_seen":21246,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-blocks/assets/js/lib/jsticky/jquery.jsticky.min.js?ver=1.1.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-blocks/assets/js/lib/jsticky/jquery.jsticky.min.js?ver=1.1.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 29 Oct 2025 09:27:25 GMT\r\netag: W/\"6901ddfd-581\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UALbXByd1%2ByXPp2Haq6J2SE%2BoMG86ou2P8w09uAWtzM8F%2FzlyIO2u%2BXiAFC4HUR%2FzYOZrXyhScYyVd7vavBMVk4Bl%2BX4EVoGnomApogZuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7cc593181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1409,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1409), with no line terminators","md5":"31179c7ad561a12763dd193320593440","sha1":"32d891302735ccbe9319f8f1ca0a95716d1ccc60","sha256":"e8f6bee396c8d2facc0e5ea861e018ffc507af142609afa517ca64a5b56285d2","sha512":"2de6fb93a15922765e707132bf2b90d97b2bc4066aa48eba005f60493bca2b41b4b5114d0537ffb05edd5ba3cd6986e935adf7175f31f7e3677b004b26715151","ssdeep":"","tlshash":"9d21af8ab3503eb6449b5291435a1e0d60b34632c6fa4175e37ed6b809f25db21e378d","first_seen":"2025-05-28T18:10:55.374195Z","last_seen":"2026-04-03T21:18:52.636723Z","times_seen":772,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-tricks/assets/js/jet-tricks-frontend.js?ver=1.5.9","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-tricks/assets/js/jet-tricks-frontend.js?ver=1.5.9 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 06 Nov 2025 13:32:23 GMT\r\netag: W/\"690ca367-b1ee\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rem4dP7ET56EWxgNbYa6rXUKkT7eYSd8E%2BLyX%2F9dBYewt1XnpSaYnWbi7lXIVugFdenyOTXM22NhtaxtzBgzNykJ9%2FUlpTHMZDnf791tEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7fc623181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45550,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (340)","md5":"59d236eba918d0bdb53368cfddca02c0","sha1":"58522dbe89a425325afb6529ad33bd7881be3d16","sha256":"d90f524d45f27adf8439b70b2fbfaa2a5a9d829c119b595ed2b210c52d35c838","sha512":"c49c5e5ed29269e1184d1bb17c7ac0c01dcd33116d5a705b23b578083b364445f2d97aa81587a77d3f350d6aec785bf93ac06a434df9ba1f49fd9eb3835a3a70","ssdeep":"768:zriPrwnLX66qbWDySIjXAIHqBtVAoALTKPUd0EyoAY4soxXJAc+bz:zuPrwnLXhmzXAQq/VAoALTKPUd0EyoAU","tlshash":"0a1333d2f77e3577412f312b980e32dc613d807694d1487afcbca1541bf049a63a9ea9","first_seen":"2025-11-07T18:48:44.567731Z","last_seen":"2026-04-03T07:47:40.16353Z","times_seen":406,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/google-fonts/fonts/cairo-slxvc1ny6hkvangtzmpqdkhzfh5lksscriys.woff2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/cairo-slxvc1ny6hkvangtzmpqdkhzfh5lksscriys.woff2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/wp-content/uploads/elementor/google-fonts/css/cairo.css?ver=1736346710\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33588\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:12 GMT\r\netag: \"682e087c-8334\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bYrIZhfWtYaX%2BedvyuMGa8T7GGf1Qy8o%2Fij0TwR%2B3hqirVIU3L6DQ8JJhlhATrU%2FCuFILkNyyQpASqqQh91anAr1Ag27dYN6bZ%2BxoAobbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fc3ced3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33588, version 1.0","md5":"ead8e97c01f0448365969c144c8c5fe8","sha1":"4ff4d355eeaace00eeaf2ae15cc50d01ac2bfa98","sha256":"1355605c748ba06b91514ca27feaa9c0c97ac33eb32fed979fc9fabb623d9023","sha512":"5251cbd0c5f9c93da29d37386afc4ee52635e0369e47ba79aac0e4482e65f4fb83e0afecca8b9e119fea751b5db50e16f6bad1f878c0ad1444609749596fb28a","ssdeep":"768:PpI6u1gMne8LfyqhrxlaHxncMkS8htBdAGt2:i6qxnRaKxlaHxcfT5Ht2","tlshash":"eae2f26352ae3ad1821a30f5522f4c363ab59ed2122417946dd0465ffded3c870ef3aa","first_seen":"2023-05-02T01:53:11Z","last_seen":"2026-04-03T01:21:05.683821Z","times_seen":1666,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/thumbs/%D8%A7%D9%86%D8%AF%D8%B1%D9%88%D9%8A%D8%AF-r658iyiywso1vyexlbkahg4w2bxt9vdxxcay5kxbgc.png","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/%D8%A7%D9%86%D8%AF%D8%B1%D9%88%D9%8A%D8%AF-r658iyiywso1vyexlbkahg4w2bxt9vdxxcay5kxbgc.png HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1403\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 May 2025 17:17:14 GMT\r\netag: \"682e0a9a-57b\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CeyRNXAA6nabNVkegHOmqIyyKGwqOoYLzkvQ3trfu1X%2BdD9SfakQ2fBUarK9Pk3vjLKallrrYego1mjH%2BAk5UlstjcmLy9QL8hyGKBvC%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fdfd363181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"a6930976a00f52b58b0c38c946cbe492","sha1":"72999421734716c7ab6f30b335fc32ef72d55921","sha256":"a614d7d66220dcf8ec8dad50c8992ef522d642f2709240121af633295d7d2925","sha512":"7f9d7334f6a3c2095631bb3342e891c7533000dd6c99242d3149c740cd720bcda7e3aa6037894199b20af167c1f5072029f72e847e1833d44afff11a8a79efae","ssdeep":"","tlshash":"c22108ed4b05e1f2d3549fb8a90b023cd9655efdd15241423fa31b2119708072c0fae7","first_seen":"2025-10-24T18:33:48.478143Z","last_seen":"2025-12-13T14:03:51.727678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/forafile.json","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /forafile.json HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 21 May 2025 17:06:18 GMT\r\netag: W/\"682e080a-2cde6a\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ehfRf%2Bjdq8LKT8xFMrwhu7ruK5MdzrYm%2BSDGuJOQP4nqy8RNVOb8oCc%2BlJIIEA6Moqviw0Hnr8xh0V%2Fs23rx6yyzedX9mgULHeOVKIk9VQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600ff4d7e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2940522,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with CRLF line terminators","md5":"831ed415893eee853eddba4515064533","sha1":"1cff9085e6aca0bb77a380114349f720afc23421","sha256":"6256691ac5a7806923cb10d4312fd64c658acaa2a75f28ad344828da83735877","sha512":"f8a4cb6a0990737f8fc174465d9d16c86ba1246baba32d2fde7cd3e5f9a3fcbfd55e78aebb0ab7e1e5de75f91124bdb57b6977d81504f288da341e2780e68f60","ssdeep":"12288:74hEI2eVyeMkdUAefJ8nWhd4VcBZYTo6JfjL:73I2eaynEdO8mThL","tlshash":"9225857ad8683deb5675d690b5b40b48fa00139b4091988b7e3cca8d1f3f9e32644f6d","first_seen":"2025-10-24T18:33:48.36516Z","last_seen":"2025-12-13T14:03:51.728787Z","times_seen":2,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 21 May 2025 17:08:15 GMT\r\netag: W/\"1c9-635a8692d72e0\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JTY8OJezWp07WVDRa3cNMmYYonGU2l4FYXnot8nlmURFjfzH2D8nZV5fIvZ%2FX8PNEW4uLQq7LeGxn%2B8OztnX5d9K5aubjhbI%2FrHVOZJslQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f72c313181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":457,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (422)","md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-04-03T22:32:40.128332Z","times_seen":81908,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/thumbs/%D9%85%D9%82%D8%A7%D9%84%D8%A7%D8%AA-r658izgt3mpc7kdkftyx1xwcnpt6hkho9gyfmuvxa4.png","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/%D9%85%D9%82%D8%A7%D9%84%D8%A7%D8%AA-r658izgt3mpc7kdkftyx1xwcnpt6hkho9gyfmuvxa4.png HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 2123\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 May 2025 17:17:14 GMT\r\netag: \"682e0a9a-84b\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hfvLRRc9EO59pZCwJmeXBqtTxv3Ll5vBHckD2ktT3ckUq38kNlNoGDQW43YlL7zvikEe6ZBbMnsRE4zVQvxq%2FYF2k3fZix5mZORddso3DQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fe0d383181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"7882a06fdd9fff9e4b08f89335cb7209","sha1":"9773e3677c5085234eb8368b48586e2608c24eb7","sha256":"cae249d6cd3c9a88bb6704c8d029de6bd90514bd734553229ba804259dbc6b70","sha512":"47aa534476d54d1177642ed6c96756d6714b990b22161dce7cbd6d9747beed802b4c9dc1e776dd8c71b3231f5dbf90f62f447fddd65579c343cf3edae6e8c90c","ssdeep":"","tlshash":"d7413aca758e3b1d45839bb714b17178a15804474db80072ce9bf4d72aea103ffe260b","first_seen":"2025-10-24T18:33:48.408679Z","last_seen":"2025-12-13T14:03:51.730325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=3.34.0-dev1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-1a39\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7YF8etlPis%2BeW%2BSbMrStsSpo%2FR0P4p3DKyDCc86baFdjtn6yFobLDGuUwJlbMvY5qHdEdBOp8cCdw5fOPI4y9IK9Zjo9kqXDv5kHpHw60w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f62bdf3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6713,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6713), with no line terminators","md5":"f94a49c4961bc08d71abedf98d482d79","sha1":"1f71eca41def14e975ce1ba14313f635323a8d01","sha256":"cf502b45ef8bcae37a65822f78546f6cc7db74faf8f48850bf8a860262817fe6","sha512":"709ba29bb0c9d3e4ff5d505c9d40e51cc2aa069dec27809b17ea754d60f5aa30f7888d0a5aa7c96effaeb98b4bda0ecb0136f685532d073051c14691b2ab31a4","ssdeep":"192:lozzzlztzDTIeIUI8IxdEzWEznI1zkDmdz0zaz6zgsIXIBIhI6dJzLJzQIuz91rn:KnhBhXIwYY2+OhSnqmwsIBOt","tlshash":"e1d1a6757f0b6a358d6b2c5b1357a06f668080e9a182a342c04318035cfbfde7bb857d","first_seen":"2025-12-04T23:21:35.478119Z","last_seen":"2026-04-03T22:31:34.442707Z","times_seen":17705,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/google-fonts/fonts/cairo-slxvc1ny6hkvangtzmpqdkhzfh5lksscqyys4j0.woff2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/cairo-slxvc1ny6hkvangtzmpqdkhzfh5lksscqyys4j0.woff2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/wp-content/uploads/elementor/google-fonts/css/cairo.css?ver=1736346710\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30596\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:12 GMT\r\netag: \"682e087c-7784\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CyS16l6T2M6LCduUhCTKlv0AAqAHg3rRTrYiTi8xbKkdHKuctouMcs64ycRk5JPq7GdjpejcTYCR6oZF1oWF9JJNAHcjSdxLXxVvH4kBOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fc3cf03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30596, version 1.0","md5":"cdfdf6997ccfea7171e17593b08e3dbd","sha1":"8bcfc0fb78306b10459da6670d17221fd1a0132d","sha256":"60d51fea6669a866e3dce8a8583978127ef1808feb14c073b2f5c2a05a45908c","sha512":"552d69f3462b6a4e843908851fec19f877c50fd26a73b099b0587ff7038dc84f66cac2f734092c601e1be11016003c90b91607dc3f3f41c3d9bbc84d017c85bd","ssdeep":"768:HIFazUmkqyKA4gVQBLTtJkTWbGfHRMzu6DWWxk0JNv/rUrI26kUEOF:HFQjF4gWLwTW+xyu6DWEJrUrI2YE+","tlshash":"85d2e163a80f3cca699551bd9e4f57bfc6da520d2acfca905d85ece40002de868219df","first_seen":"2023-05-03T02:35:35Z","last_seen":"2026-03-26T12:08:59.850785Z","times_seen":1287,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/11/07-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D9%84%D8%A3%D9%88%D9%81%D9%8A%D8%B3-1024x1024.png.avif","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:21.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/07-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D9%84%D8%A3%D9%88%D9%81%D9%8A%D8%B3-1024x1024.png.avif HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%224fad347d-d169-44eb-822c-a52188089546%5C%22%2C%5B1765634595%2C738000000%5D%5D%22%5D%5D%5D; _ga_1G95R5YDNV=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0; _ga=GA1.1.358228018.1765634596; _ga_HVTEJNCQN9=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 96558\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Oct 2025 06:58:00 GMT\r\netag: \"69006978-1792e\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gv7mGlZldwEm5KmBBzF4%2F0NGC2qTlAAeRekGVc94OgVMN8fRjwvJHZ7%2FiJeqa2%2FmRz%2BZlDgRlWM1mjRQOr%2FV3FItWap%2B7k5FFfIxYpKoEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad601256a0d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96558,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"689319ea4b6a499eacaace082c6ff30c","sha1":"55ab2e30d68f42aae79a366208623d72ef09d622","sha256":"bc1d0029f58ccc6a807f8635fb4311b82fcd737192d5c0d085c371fc4f7cc443","sha512":"00ab4e77e1bedeaca717e88132227814579c6dd35b5ecd37b04aadea893a20056af571eb78f48d53663c50f9050d82901fe645f3e72ac74103a34ff2ef06469b","ssdeep":"1536:QZGx4V9/9sLrBpq6Wxx2hx1COY4oeMUcpblCD8fLiRZO0Sb1zpaILlvlZEKL9+uF:Q44jsL7qXpOij5FfagzkGRjI3r7jcZOW","tlshash":"3493123d7f1ed171f820197681fad62490726c7d4eea2be1dc8714290c5a0fe1fd2898","first_seen":"2025-12-13T14:03:51.731938Z","last_seen":"2025-12-13T14:03:51.731938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/11/%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D9%84%D8%AD%D9%85%D8%A7%D9%8A%D8%A9-%D9%88%D8%A7%D9%84%D9%87%D8%A7%D9%83%D8%B1-1024x1024.png.avif","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:27.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D9%84%D8%AD%D9%85%D8%A7%D9%8A%D8%A9-%D9%88%D8%A7%D9%84%D9%87%D8%A7%D9%83%D8%B1-1024x1024.png.avif HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%224fad347d-d169-44eb-822c-a52188089546%5C%22%2C%5B1765634595%2C738000000%5D%5D%22%5D%5D%5D; _ga_1G95R5YDNV=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0; _ga=GA1.1.358228018.1765634596; _ga_HVTEJNCQN9=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 102190\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Oct 2025 06:59:48 GMT\r\netag: \"690069e4-18f2e\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfwrpxxRnInrtFhdRh23Kd4Es7rW6D3KeMsz9VZkExymBXEf%2BxlNefuQoMHN9pMarUdr%2BBbhrHdRmhC1Ab6D96klVBw4OK4%2BgvqDF%2BAJ3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad601486f643181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":102190,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"b79ffc3e333e705cc941a988e5dffc73","sha1":"1fecad1c9f6cdfa587bcdf2e1552de8cf5d41290","sha256":"9dfb12e22ab3c6eb1e02dd63007dbbfdfa649ec09061f61170d6b91150b866d9","sha512":"203edaee2f686e8d9240fb401f9e6c20c6c981140c1d27bfc5b02496a178c80aa311c68913bd2d12847406401e9272401792ef230e740af1027f19e1224c73d1","ssdeep":"1536:148vrvmVWqQRdn/FPILQBPiFBJ+d7/G0yKLbMqofgY7rNkV/k0ng7HViYalnEiQg:148vrvVqQ3hG+iJ+xuYUOvV/k0gYjZD","tlshash":"32a3023cf97597abd8dc5b798ce933490ea9224e7bb24e26efb04464b5231708f81345","first_seen":"2025-12-13T14:03:51.732732Z","last_seen":"2025-12-13T14:03:51.732732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-e7d0\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNQjLpnLs9zZ2ilNhb7FyATokJ6V06F243fWwVgA7L4MS8uXNLbOkRACLQzAdg6Qi%2B07BRBWpZkmfhIYB0ju7gsh6aMqODjLlsn5CDOEUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f60bca3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59344,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-04-03T22:34:57.365755Z","times_seen":79982,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jetformbuilder/modules/wysiwyg/assets/build/wysiwyg.css?ver=5a4d16fb6d7a94700261","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jetformbuilder/modules/wysiwyg/assets/build/wysiwyg.css?ver=5a4d16fb6d7a94700261 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 30 Nov 2025 12:43:58 GMT\r\netag: W/\"692c3c0e-2379\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5V3MqvSFQ5xqJy%2BR4nMQWnSzbRVoLfrteZ6bJX8tj%2FDB%2FdN4NXp2odmv38vXhyhasQ1yhH5sVt80C38UTeY9MYwoABtICKoAQc9GN9pYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f61bd33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":9081,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9080)","md5":"ec603e4e4f99b8f3a2c9582b4754d63b","sha1":"167f49e8cefea8789033d5bb7e1949cfcf806eb5","sha256":"a1024003b2f92e438f086857c77c8a8643975c106a8f1a13200dba6da5225063","sha512":"9fb42943d416249e6dcc6dbf944ddbaa095729423cb05a82fc219f6fb447c446a23892c7444161575e9d9cf4fee39b4bd6ae51ec44d91617c25e9d7ffd017b40","ssdeep":"96:Ya7BCAaFkfIYRskBZXP5z5VeWftZx6U3kRZk6Z4PVk:YTMn5VVtZx6U3Fk","tlshash":"191279dba01a49b90d5f2bc8309d7de4eb06e3428d92f690f29370d021b6e915e355cf","first_seen":"2023-12-21T03:04:42Z","last_seen":"2026-04-03T16:32:37.926539Z","times_seen":995,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-menu/assets/public/lib/vue/vue.min.js?ver=2.6.11","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-menu/assets/public/lib/vue/vue.min.js?ver=2.6.11 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:39 GMT\r\netag: W/\"6938058f-16de6\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DsLUgeO%2FfJzedJ2Lt%2BRWSHLOjWNxDMEYPO89ZzuyU6aY7PC66rN6V4yoYJbgeNMQSVyVQLP7t3xkp%2FBgV1AgOC%2FhB%2F15Bs15XMvDD64RhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f73c373181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"6c81f02ad0bf8e12a66c18cab188d029","sha1":"abd239f02966b2d324b0512c203bdbaf82a4ed7a","sha256":"9e0156dd49c03744e79bbea60eebbbb94b5811c1b71b91f5fb38a8270dedfbaf","sha512":"409b23dda7d6942a6743ad17cf3604f096f72201c82b505c199a31f6b51299146adce733f6f435c91f34797dbf6fd8dfc7f52e4f9cd858d76b33c4defde08c85","ssdeep":"1536:EUXY7qLtpHt2Pne1mZ8I6H82RaLPMBlo5VV2B/S/r:zYeJpN2vefKMBlmV00/r","tlshash":"979308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2023-03-07T01:11:55Z","last_seen":"2026-04-03T21:25:08.010453Z","times_seen":9476,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/wpforms-lite/assets/css/frontend/modern/wpforms-full.min.css?ver=1.9.8.4","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/wpforms-lite/assets/css/frontend/modern/wpforms-full.min.css?ver=1.9.8.4 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 11 Nov 2025 17:55:36 GMT\r\netag: W/\"69137898-28d4e\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNTJOSwVYp6dMD7SfPMeh5Itcp%2FkxpmCRYDFhtVgYiK9llTCFIzcmWOmBzCrshvKHJ22JQtWDb6g5YY4MlMd0GutAjH2%2BnDV5522BNkA5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f65bed3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167246,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3f51a0128741da762fdc9683000ebd40","sha1":"977b2136b8c262bff807b1a522ed5bfa6d041870","sha256":"0418fb90729084265c5f4d06ad5b5e0353497128f61db210fa6ff7c96d4d2aea","sha512":"bed78c1db26da954997a5f166012402c6c03c15242b57d060a1acf7c136b8362eeedda94a76b65a5304902986619a7750a4593f47449a985c0e2beca13e6dc5f","ssdeep":"768:LGkOgzRho+uCWo4WlixWixkLajBosUBMuCq:LGkOgzRbWo4WltpajBosUBMHq","tlshash":"9af3cc394b016ffae9bf489e61cf87c30b12cf23de455eadba138826de801625513765","first_seen":"2025-11-05T00:50:41.207223Z","last_seen":"2026-04-03T22:32:40.07561Z","times_seen":1419,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/astra-addon/assets/js/minified/purify.min.js?ver=4.11.11","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/astra-addon/assets/js/minified/purify.min.js?ver=4.11.11 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 06 Nov 2025 13:32:07 GMT\r\netag: W/\"690ca357-56c7\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zfUUQmtoNWvQbPgN52DJgBfHrqnHWqeHMwrCZgxB0MrSoIknoTjRiKn2r1bnk3LkLSYoENFmiUA0QTyvqDwGYFGE9VP%2BE9VeB48x7Fkuig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f73c353181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":22215,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22027)","md5":"fd87e766b51ac40500bc6a7ab45fdbf5","sha1":"7a110e184d0306b1e8dbdef44398a47be54effc5","sha256":"f8e4d7b0f1c613e9e79f2dd8d37c8b30e021d06d300684b29750c7f02e53e5fb","sha512":"37fd87762923312f9db9f4a40aafcad980150ec4f0d54e859bf2f6dacb5f1f5b1a0e512e3d32033e088bf98228a5a18b3951c5d885a1ed7d8f7bfe999b7fa379","ssdeep":"384:1yG3zyDNiBJRMmv8bUMFAmXlV1O4v5DE912nkk+i7wCWgXcFJBtcTukR9EL20mOq:FOYNlv8IMFZXlVU4xYH2nkk+i7wCWgXV","tlshash":"a1a2495e6d2079765fee41d820bb590ea1bc101f700c84b0e7ceecb554baa95606bf2f","first_seen":"2025-04-19T04:49:15.134746Z","last_seen":"2026-04-03T21:36:03.909248Z","times_seen":6742,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-menu/assets/public/js/jet-menu-public-scripts.js?ver=2.4.18","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-menu/assets/public/js/jet-menu-public-scripts.js?ver=2.4.18 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:39 GMT\r\netag: W/\"6938058f-8a61\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSblb5U3zjLywicwowXzB5qcCeIETLLrI%2F0gRtyjepxo%2B8wjndpMb8dwSomPvTtdAXsX9nKnia4Uf4Z70c9HdgFmfKtskQZD8jGqd0wNOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f75c3b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35423), with no line terminators","md5":"bb387604d2db70a862d4087108d1f0da","sha1":"aff5d915aafdb23e3ac18b4a217698547973b971","sha256":"7d9e6cb1e0564d0d2e07bfb2c7e876b3c364b0eb3de19288edfe26465b62b3d9","sha512":"f2b2e439b8ba76820680fdde6500fb892e468245a5f23a8dda465405ff0fe0a7a7ca98fac75fd146c3bbb094817b7be71d8fc1a54099fbbd4e9861c7c655c07a","ssdeep":"768:mAWeIcBhjrPDIWCB5ajxDwnPtdAfQZMgxySz1qjbn6P1uEQ90M09H0G/ljsQFWj8:mA53cTHuGKCf2GFm6AKfbiBdUTlt","tlshash":"6ff2b5517205316807ef51fdd2162329bb732581a046e43db8b8adcaecf684a71e77bc","first_seen":"2025-12-09T13:52:02.155379Z","last_seen":"2026-04-03T22:13:31.527798Z","times_seen":341,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/google-fonts/fonts/cairo-slxvc1ny6hkvangtzmpqdkhzfh5lksscriys.woff2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/cairo-slxvc1ny6hkvangtzmpqdkhzfh5lksscriys.woff2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/wp-content/uploads/elementor/google-fonts/css/cairo.css?ver=1736346710\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33588\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:12 GMT\r\netag: \"682e087c-8334\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UiaMASKfQnrXDcoX6F0%2BHlIjKOBctGn%2Bj3nOx%2BUWKCuQRdnNm8hhsImLMgppfC4pDZvBo3IdUaj0tBP41hjBCBWJKKdcWQeeCFPIYwjzcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fc3ceb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33588, version 1.0","md5":"ead8e97c01f0448365969c144c8c5fe8","sha1":"4ff4d355eeaace00eeaf2ae15cc50d01ac2bfa98","sha256":"1355605c748ba06b91514ca27feaa9c0c97ac33eb32fed979fc9fabb623d9023","sha512":"5251cbd0c5f9c93da29d37386afc4ee52635e0369e47ba79aac0e4482e65f4fb83e0afecca8b9e119fea751b5db50e16f6bad1f878c0ad1444609749596fb28a","ssdeep":"768:PpI6u1gMne8LfyqhrxlaHxncMkS8htBdAGt2:i6qxnRaKxlaHxcfT5Ht2","tlshash":"eae2f26352ae3ad1821a30f5522f4c363ab59ed2122417946dd0465ffded3c870ef3aa","first_seen":"2023-05-02T01:53:11Z","last_seen":"2026-04-03T01:21:05.683821Z","times_seen":1666,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css?ver=3.33.2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css?ver=3.33.2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 04 Dec 2025 18:47:26 GMT\r\netag: W/\"a2-64524c295d738\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2FynlnQopY4XFPRjHyv6ax8BH3b0taqmjc1U1NAGWQ%2B3RmHNkgQcVxOW84WNZ7WQNwIgT408DxLJM0nkYGyUdR1sWEm47cuLSbhb%2FMfpYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f63be23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7305ed8a30b2e9610fea4e383b7d1756","sha1":"24bef514e8dbd4dc0cbebb686639085dccbb9b4e","sha256":"6f0b2e96bd88c2d8512dfd204adaf2251376467a1f834a51c66ce85f0051979d","sha512":"cb9938e53724a35304cd932207fc9a255f4aa51ea111168e7fe4f9871435e5430a0377886243a4a62b3c2de92f143b88608a460086f6f482e024d251d29be11d","ssdeep":"","tlshash":"82c08c847a8fc830c03fb291088aae1c036ba8c34a90408aac12a00e0aedfe512dc002","first_seen":"2024-10-29T10:46:14.149107Z","last_seen":"2026-04-03T22:32:40.13648Z","times_seen":32146,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.min.js?ver=1.14.4","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.min.js?ver=1.14.4 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:36 GMT\r\netag: W/\"6938058c-15613\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SnjrqnNaKlTSstqWPm4U5ZlUi%2F37Kt8Myjh7vtAILFocj6%2Bp2lRcDhwiFnvU08NS024Kg0hb4iEqcj26DSZfzge8Xn5xnZE1ETp%2BX9QZ6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f71c2a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":87571,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"30571d15b5d67086248f7043c471326a","sha1":"8f4692e09875820e406d53c4db2ced3f911b4ba4","sha256":"5a59125afa28561f5d8df5ef70bf510f1eda3f7af96b221c8d8b0ce68f35050e","sha512":"fb681a678836b55f399d71079fb11b68cc256460e0a86a50636a620f15eaf2066438f88ae7d0366be49e3f90db49391cf362f6c6b5544d7590da67de8fcb9e87","ssdeep":"1536:mx1HvXTZqUhsS4q78aJ0vDNVUEiYV9YWxi42CIkF/F8gy8BMgqUM7ZNofk9DwCUT:q820vDN7icSW6CIkF/F8gydofkEhclna","tlshash":"cc83a6253410697601ef2afb909b31cc22b158eee5024c782534c8db2ef9ed627a57f7","first_seen":"2025-12-10T07:17:04.945302Z","last_seen":"2026-04-03T21:25:07.947908Z","times_seen":409,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/astra-pro-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=aabd2ae4238bd052108b","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/astra-pro-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=aabd2ae4238bd052108b HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:41 GMT\r\netag: W/\"69380591-19ad\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2Fod0XOtA%2BaaZ%2FJKzDJq5hzEP%2F85dQU61fn%2BDvEDpyPhb2eKC0PQbGaCAh9tMn0eCUGLnozoIGEcZiPlkZEZwXrhZw7z6XgksDEEwywrTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f72c323181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6573,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6573), with no line terminators","md5":"1d6e962d4355f2449ec11d9459af9c85","sha1":"a051d62e07c2537141e4337c96fea3735e8ff600","sha256":"4cbe790fc4be08465dff197690598fbd2b9b8b051536caf8b021e7d171d028ef","sha512":"4ad50a3bbaf1e52f1b362f163926ebe6060cc287c4557aabadd4970c5555fb33af478230a122c559e9547d1cd21f6c01fb34087903175f3e08d49133af28a3f7","ssdeep":"192:tXCj6CnyYlqqOre482UO7N1qqjs1SIVje5L1CdIFLXPMoB6sxdg:u6CyYlq/i482UO7Na1vV65ASrUo4sxdg","tlshash":"aed1b63a3224d9340bba4aefb978e3d0f464b519b90792e4c9dccf0924b5d43139876a","first_seen":"2025-12-09T18:08:59.722451Z","last_seen":"2026-04-03T18:28:30.751043Z","times_seen":246,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 04 Dec 2025 07:51:31 GMT\r\netag: W/\"69313d83-161d\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=scm37uTUeRQycbeSYmF%2Bup4FCV2SGWIflJx6mXJvmSb%2BKubnwJNmEYnQR%2BcQGYb7SNbp9eJMD2JmHJ5EyS2VWilnJkqZqVseESAysc7vIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f73c363181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-03T22:31:34.450016Z","times_seen":108114,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fundingchoicesmessages.google.com/f/AGSKWxW5jVuO9dyeLo6vhH1IO_8rovRmW-eBBPYLxbnhwz9w53iu3eDwlAh64SV3I5UVB57BFUIljlfCd8SoYiCAXLSVoqNT5y0ldh83PE89z_-aoqoRCU1abtAht43lgP7foWM_ET6K2Q==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzY1NjM0NTk1LDc2MDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cuZmFyZXNjZC5jb20vIixudWxsLFtbOCwic0NoTkg1T3NhazAiXSxbOSwiZW4tVVMiXSxbMTksIjEiXSxbMjQsIiJdLFsyOSwiZmFsc2UiXV1d","fqdn":"fundingchoicesmessages.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:16.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"98:61:A1:01:94:12:1C:03:5E:13:41:74:51:6D:2D:18:E9:F2:69:05","sha256":"4E:24:16:A8:D6:22:3F:BE:06:74:9D:F4:9B:CB:DF:31:D8:E5:8A:F9:E7:B3:7F:8D:5E:50:F2:25:34:EA:7A:94"}}},"request":{"raw":"GET /f/AGSKWxW5jVuO9dyeLo6vhH1IO_8rovRmW-eBBPYLxbnhwz9w53iu3eDwlAh64SV3I5UVB57BFUIljlfCd8SoYiCAXLSVoqNT5y0ldh83PE89z_-aoqoRCU1abtAht43lgP7foWM_ET6K2Q==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzY1NjM0NTk1LDc2MDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cuZmFyZXNjZC5jb20vIixudWxsLFtbOCwic0NoTkg1T3NhazAiXSxbOSwiZW4tVVMiXSxbMTksIjEiXSxbMjQsIiJdLFsyOSwiZmFsc2UiXV1d HTTP/1.1\r\nHost: fundingchoicesmessages.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 13 Dec 2025 14:03:16 GMT\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport, script-src 'nonce-WLzfLKS7PhwGDQYcWQBOog' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\nreporting-endpoints: default=\"/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjWsCoxSXF4K4hxdB68xzrVCDuWnSedRYQGypcYnUE4g_1l1l_AHGRxBXWJiD-VHWDVaj6BmsS-03WIiA287vNagfE1e5ebM1AbOvvw-YKxN-KfdnYSnzZ9v33ZTsGxHtz_NiOAnFmpx9bIRDrbPZjMwHi83v92K4D8eqbfmybgXiFlz_bBhD282fbAcRC3BxLnnw9ySbwY0a7jZJGUn5hfHJ-XklRZlJpSX5RWnJaanFqUVlqUbyRgZGpoZGhoZ6BeXyBAQDP5lCB\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5616,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (878)","md5":"fa85d78dd9031e8c8166e32a1be63ef3","sha1":"682e19ef74eeb9120d60c43a7d9c1dcbcd22b31c","sha256":"56b02a9e2de9d2bb234c59731903a45e0f5ed48acf372354a9de3040d8612b80","sha512":"eaf5efce9df3ee62fcc236a8dbe0bff833da782c417cd0b5095b3cb7a031dc6569a60b00f39f44487d05bcc9b796add7899ef657c0f9e3bcf7d3ec8dda381142","ssdeep":"96:3zM8MDM8ix/Q02gglUwwzzUjuOZI1H1czL/AJi7kG4VgVNDOBVcvMiIhO:I8Mo8ii02ggqfUjuK4aP/kG4yoBgMHhO","tlshash":"45c10a86308794f662a5e83d442b8116b45fb813e04ac1af7a968df1fdf140e5534ff8","first_seen":"2025-12-13T14:03:51.73948Z","last_seen":"2025-12-13T14:03:51.73948Z","times_seen":1,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:16.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%224fad347d-d169-44eb-822c-a52188089546%5C%22%2C%5B1765634595%2C738000000%5D%5D%22%5D%5D%5D; _ga_1G95R5YDNV=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0; _ga=GA1.1.358228018.1765634596; _ga_HVTEJNCQN9=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:16 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-544\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jD6jVztGnvyRllCuhz%2BmCtuinM7EeQBpNgU3n13%2BBOtHrYe2zrD8YM64su1HyOsCiz25delMkpK4ko8UiTGexJx6IILt%2FLvBHMuixtWlbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad601022de93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-04-03T22:32:40.105836Z","times_seen":61879,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.34.0-dev1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-d524\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ELrLX9ERFoBctKNqVP%2Fj863kGcvvJ3nIVmt7wVRyUR9SOi3EFlnHdB0n%2BjA%2F%2BWHCeanx4XQtVxb7IGdp0Kae9H28GCw5q4eh0tbNmgYaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f62bdb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":54564,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54564), with no line terminators","md5":"a286126314ec92d85cd0302320a9564c","sha1":"4ada0cc7c92f17e114641aa8cdabe934954658f0","sha256":"af678b3d541e064f18fca2e33b6ac896a88a902f71fa4c66b1c5fe2cdbbeeafc","sha512":"ee4f659fe14a3af6605f868dcd2cb3859f33789b7433bd2eb9e887049724aea41199bdce8fb0c3044751dc20971f59de7066597ec13e0fd23ed77fbb9e8a71f9","ssdeep":"384:5s4J/8DEksCoI+SBQYO22/RmRs5Cz9TQikvmGkvmCFldtraiIks05ArOk:wFLh5mP3RwlDdps05Xk","tlshash":"0a330da23d13b269226f442b82c7364c536495c1ee1375d9fa04c5239afece63b36c27","first_seen":"2025-12-12T23:30:14.932004Z","last_seen":"2026-04-03T20:47:57.054954Z","times_seen":15241,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/google-fonts/fonts/cairo-slxvc1ny6hkvangtzmpqdkhzfh5lksscriys.woff2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/cairo-slxvc1ny6hkvangtzmpqdkhzfh5lksscriys.woff2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/wp-content/uploads/elementor/google-fonts/css/cairo.css?ver=1736346710\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33588\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:12 GMT\r\netag: \"682e087c-8334\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jO6DzZGUMt4b1VIb4EmDau%2FiXNZWHpbrUPpbBX%2FI%2Ff8XPLrU3ILYfXm8sWK6EargVA88Y4r6OpV6OKcHAcw0%2BHblW2Gcl8UvdRDdchl%2BnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fc3cef3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33588, version 1.0","md5":"ead8e97c01f0448365969c144c8c5fe8","sha1":"4ff4d355eeaace00eeaf2ae15cc50d01ac2bfa98","sha256":"1355605c748ba06b91514ca27feaa9c0c97ac33eb32fed979fc9fabb623d9023","sha512":"5251cbd0c5f9c93da29d37386afc4ee52635e0369e47ba79aac0e4482e65f4fb83e0afecca8b9e119fea751b5db50e16f6bad1f878c0ad1444609749596fb28a","ssdeep":"768:PpI6u1gMne8LfyqhrxlaHxncMkS8htBdAGt2:i6qxnRaKxlaHxcfT5Ht2","tlshash":"eae2f26352ae3ad1821a30f5522f4c363ab59ed2122417946dd0465ffded3c870ef3aa","first_seen":"2023-05-02T01:53:11Z","last_seen":"2026-04-03T01:21:05.683821Z","times_seen":1666,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/thumbs/%D8%A7%D9%84%D8%B9%D8%A7%D8%A8-r658iyiywso1vyexlbkahg4w2bxt9vdxxcay5kxbgc.png","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/%D8%A7%D9%84%D8%B9%D8%A7%D8%A8-r658iyiywso1vyexlbkahg4w2bxt9vdxxcay5kxbgc.png HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 2295\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 May 2025 17:17:14 GMT\r\netag: \"682e0a9a-8f7\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bC%2BcdG4456tuOibv1elCUIl17l7DZCQTbWZvW4RB7LG8cQJZC74SA3pOzm7FuhwD9ahIfKtdXTVh0udZnSTSocSYSNTME2yZ%2FvJmHHBMBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fdfd353181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"26a81b5a16498ed0e24f9c2e4c20aebf","sha1":"052e2e478cf41e5692f878c185d8affff3ca7914","sha256":"1e429c302d3c0737a6468d65741510d7b772285e41f4c313be57e9c0809712ed","sha512":"825f93fc2015db594b4b133a6cefa7db7d6409ed44ae652d9d32c52b0210c941b7a8e973325f5ba5db6bd52daee8551b63abb90b60bd0a92fc26dc01b7abc875","ssdeep":"","tlshash":"48413ac5c2294db8eba4c66c83be05eec74012e20a508512e90321d3de3f64d3f994cd","first_seen":"2025-10-24T18:33:48.507191Z","last_seen":"2025-12-13T14:03:51.741419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-menu/integration/themes/astra/assets/css/style.css?ver=2.4.18","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-menu/integration/themes/astra/assets/css/style.css?ver=2.4.18 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 09 Dec 2025 11:18:39 GMT\r\netag: W/\"234-6458312db4828\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bi9hZ6%2B6oHtqmixuHOqi4innfCt%2BNHhBK7GwA6Z6D%2BbXHtb3OBKUq%2FZkbR9RaiOaY89N63ExqV89CQLX3fWm5Cmv3FEIkIPQyrWM8j24pw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f5ebc03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":564,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cbcb575d59b7dadce9e34306de9ee9de","sha1":"b209141ee00d43de1c5fd2cdbd659616a9c14f67","sha256":"13d3edcddc9f9de9e16f862435d3907be7582f4e3cafaada435fef488b02e932","sha512":"5e3fbc40b0c42cb822940dab7e4845591ea91d42683ab013d8861bf3b96dfe1e745168249eab90d2b266e0f7fae254eaa51abfcccf490aa9b6fc486eb0ec0e72","ssdeep":"","tlshash":"f0f04640d3946c52b6341738fa41b6104fb983058b4eb142a995eb06cfd2242af7109e","first_seen":"2023-04-17T03:52:18Z","last_seen":"2026-04-03T20:47:42.925394Z","times_seen":306,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-theme-core/assets/css/frontend.css?ver=2.3.1.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-theme-core/assets/css/frontend.css?ver=2.3.1.1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 04 Dec 2025 07:53:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncf-cache-status: DYNAMIC\r\netag: W/\"0-6451b9f7c7be8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vETWFeEl06LByj8A8oGF7%2BvDePhFhKZkikMS1me9E9nVSaG5u5brbAz5NXKo4cJtmcRa09mqXW%2BqmS0CsW9lbAQ5Kk3My0yWUn3lGGXK2Q%3D%3D\"}]}\r\ncf-ray: 9ad600f62bda3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/ultimate-elementor/assets/min-css/uael-frontend-rtl.min.css?ver=1.42.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-elementor/assets/min-css/uael-frontend-rtl.min.css?ver=1.42.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 01 Dec 2025 15:34:11 GMT\r\netag: W/\"692db573-b0ace\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQjLZ6tdaUeB4suq5dIqyV3nx9f8ktW5rxoB8%2F%2FwPefnUFLHzZ1acpy0CJjZrn%2FuEXyp8pOh2WYU7KGSeSeXQK4ScrBL6C1bty5WIo0zvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f65bec3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":723662,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"102eb895452a87701d8cfb261f932141","sha1":"48b9140277495ee16740b4e142474fdac60b7118","sha256":"8d5a163910b86321a616d9bc781b5c1373faf4b5b636581208a1607fd64b6b8d","sha512":"ff434f43d031422b04ae64894e0a15535b63531953dfd519c2e40388db5ed2c96b58db11a328c542b36877a60ae75b899e5b382288faa9977f70eeea35dc16ed","ssdeep":"12288:Jz7/0fN7lI1pjWdK99pv21Wqer7j03Rh01OlfHNktZUhX84YL9kmLCj4vcCE+wv/:Jz7/0fRlI1pjWdK99pv21Wqer7j03Rhl","tlshash":"37f4d827ff7133681d1f8525e3ca7b44bba04552939219f9e4b3a62c8bdb58503b620f","first_seen":"2025-12-13T14:03:51.742876Z","last_seen":"2026-01-21T16:21:08.933121Z","times_seen":6,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-4057\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HOimwbAmYKG%2F1sG5KcFQq7aLffHWJrP7EuZXzj5SkfL2B93wnrOx1O7PbNI6PfCk3cMUnvETNFCeWMjdE2AWDxNJ38Z8MWbrT7qFH%2BKvgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f67bf73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":16471,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-04-03T22:31:34.479254Z","times_seen":95445,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/cache/background-css/1/www.farescd.com/wp-content/plugins/chaty/css/chaty-front.min.css?ver=3.5.01692173004\u0026wpr_t=1765640658","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/cache/background-css/1/www.farescd.com/wp-content/plugins/chaty/css/chaty-front.min.css?ver=3.5.01692173004\u0026wpr_t=1765640658 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 11 Dec 2025 18:52:16 GMT\r\netag: W/\"693b12e0-868f\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gM%2FxBJR87lMWKEv%2FdC47p2%2FPy3seihlIefIU5Y58pOheZ9O4h%2FJ875jgMZw2apF%2FKXQfN9E3EbrsSaijJd7t%2F7j24j4DcgexVnDGRxErzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f68bfd3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34447,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (34447), with no line terminators","md5":"0c4a91531dc0e5bb5d562ce40274ce36","sha1":"f1bbf40357f7083be4ac182c65ed8eab703e7c05","sha256":"c9a918164b85303adf1498249e983d8e49f2de2355a2e826630c80b21fea9803","sha512":"ddc184c3cffbba4db0f07abbb1d50f2daad063be5a0b910922b848c4233a73e1eebe00ae1689643ac322effdf37b95eb7387f2d92f6b0a30c1bc92cd223679b6","ssdeep":"384:iBlOWWe7m+l33hjoK6wJUvAeVMhwZvYYzb/:i3tvTjoK6wJUvNuhwZD//","tlshash":"22f295f2c1416034512ad2263ac16af42135e5a6e9630c7af26475f8c6cb1fbf726f87","first_seen":"2025-12-13T14:03:51.744248Z","last_seen":"2025-12-13T14:03:51.744248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-elements/assets/js/jet-elements.min.js?ver=2.7.12.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-elements/assets/js/jet-elements.min.js?ver=2.7.12.1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 29 Oct 2025 09:27:26 GMT\r\netag: W/\"6901ddfe-147b7\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qzSjlJG7t0zLmeAW%2BOhWgEr9J%2F3dT9CVsq0L8MUWg3mUOpDPqi4ZOjiYlu%2FZvlad3O6K5HSP721m8Xh38wBokubLkbNHrEnt7ToMwtj9Lw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7dc5b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":83895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4fefad9ed762f144473cbedbc1ceb657","sha1":"04666623566ed37605ce7f1356e9b1c3422f04b3","sha256":"7c41c529439b6ba4a138172e576ba4f6631beea14cd432b075bd96d0666b29d2","sha512":"4a8d8cac2282977d7dbe5259dcbd5426fa63bbc39cd359f813cdd9f469c1786e7b2fffc66c7566e38d5d8b6043f71897f0ff8694b1eb38e1eb6a05a02a6103c6","ssdeep":"1536:5GY3odUPttpj5oxAIwzXDNg2GiOawv9onx4z08RD6qio/BRcBWchYrG2pCWU4PeJ:xo8pjdXDiC4z08o4whVuPeD1","tlshash":"61832805b22038a240eb316b815f7309e2735a65a907c4a0f576c4f81e7de9b2377ede","first_seen":"2025-10-23T21:49:21.974628Z","last_seen":"2026-04-03T19:41:57.955083Z","times_seen":1258,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/thumbs/%D8%A7%D8%B3%D8%B7%D9%88%D8%A7%D9%86%D8%A7%D8%AA-r658iyiywso1vyexlbkahg4w2bxt9vdxxcay5kxbgc.png","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/%D8%A7%D8%B3%D8%B7%D9%88%D8%A7%D9%86%D8%A7%D8%AA-r658iyiywso1vyexlbkahg4w2bxt9vdxxcay5kxbgc.png HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 2101\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 May 2025 17:17:14 GMT\r\netag: \"682e0a9a-835\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N0qENDKBR38AMe2EWW21PFPPJTTuB7Wv0K4tbPCAPa8PuEYp950qGR%2BYBV1UE%2FEg88pE%2BIH01UDeMcxq%2FPGzeDxw5m77TGgwGV88mL4PSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fded2e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2101,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"14db82483f43fe59589200adea97ea21","sha1":"c93da1ef8a43295c0c222aae6f1d7789b1fd892d","sha256":"de49e31abb42733d4c391cfad6e96f09f4b406f1b92625b5529e596188763c34","sha512":"cab2ca60a1f35891372d54ed10e57e2ab0886e9e3da9401b2d9f13d6e5e560247cb2aa125ab8143a035c7b09fc6625ed7f12449e4bf617ceaad0bc3b6d91fd30","ssdeep":"","tlshash":"44412a153ae5d4afa3c4c5580bd33cf29053f18c21e2223863b22b3606a108ca63bab5","first_seen":"2025-10-24T18:33:48.424017Z","last_seen":"2025-12-13T14:03:51.745565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/thumbs/%D8%A8%D8%B1%D8%A7%D9%85%D8%AC-1-r658iyiywso1vyexlbkahg4w2bxt9vdxxcay5kxbgc.png","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/%D8%A8%D8%B1%D8%A7%D9%85%D8%AC-1-r658iyiywso1vyexlbkahg4w2bxt9vdxxcay5kxbgc.png HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 2700\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 May 2025 17:17:14 GMT\r\netag: \"682e0a9a-a8c\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BcBC6uOFuzylPFqXPoIigOzGJoIIFZ8PPkDUYkDjjD0nIZaPRRisLnUXC%2B803jrY2TbuGyEKga5mwNx6Ms4qady7558Bi31qPQbaBw0prQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fded303181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2700,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"5e5c6cd942b8ccfd14605d07c1eb3464","sha1":"9d3e41573a509c55ebcf30db7ae785888202b352","sha256":"017f262a88981aef44070f564a780529a4ae1bf7303a9f058b84420502a9bd02","sha512":"9804f5afc6f1d0fe8ea796c5f1b2652548d86705123967d8bbda7f7f41d19de95c4fa56e3dda989c3c867ab11bc00bcbb8af2aa04ecad24125c013b1e6c6632e","ssdeep":"","tlshash":"b1515b34416264b9440af3e2271712e4ca2f081f00b30f2c5cc7ceca72e9abe9d86572","first_seen":"2025-10-24T18:33:48.572476Z","last_seen":"2025-12-13T14:03:51.746396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/css/widget-social-icons-rtl.min.css?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-social-icons-rtl.min.css?ver=3.34.0-dev1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-13f6\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nouM3FfUspWBdE0gCfdXvZJYHfC8ECT5vbGJMK3m8%2FBlarRP0pZeIpKNJikk%2FDJImIJiEqgQp7r3c9OvLJWohCCuU5pUvy9ecTW2hHUTyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f62bde3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5110,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5110), with no line terminators","md5":"d026a17938c5380cc610572fdda43f40","sha1":"2b5df61e56b7fe1dfb88f1707d4b017909b02a75","sha256":"91079644ee1e76145b30c207470b56866770b0564f0fbf1373ab8b11d94f8c9f","sha512":"00dd387f3726c15e71f2f7379c4fd3bdef41c2d81d73f22f3212991b4d18d4b663ae89906722fd9e188606c1061f3f8b5472deee2cd514680e64a29f8193cd66","ssdeep":"48:FDoWozmcbWsiYPt3U/vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eoL:5oz/WkBUHjfQL7aFu2if3Jf9HL","tlshash":"e5b17651be4f9586321f002a0993f309d05a12c5dc8c6f78f856b16e59b6fe43a73eb2","first_seen":"2025-02-28T14:24:31.329664Z","last_seen":"2026-04-03T22:32:40.254864Z","times_seen":36970,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-elements/assets/css/addons/jet-headline-rtl.css?ver=2.7.12.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-elements/assets/css/addons/jet-headline-rtl.css?ver=2.7.12.1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 29 Oct 2025 09:27:26 GMT\r\netag: W/\"6901ddfe-a54\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBITdOC2cuF0ewGnBIwA90mk%2Bd43GQDO5Zof5nHZspTjwnDd84KphhLfIOQug0RZcP1sf2KTYEDPoiiFWfQxOZkPU9Ii19Sppvx1ZdPdoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f64be73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2644,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2643)","md5":"7ba6f0d8be755ff7ba42e4c561fa4975","sha1":"414d44249d4673b37f11a583e3eb7dc9a2ebf71e","sha256":"d8ba56f899ba18a8374e484bc9cde367337ac45ce5e768db3e181bb3e9fbe740","sha512":"e2c30618a3811742d706fca27c28b56d4eb27400e1feda007b9e6ba689800f8ad31c1e25d3483f13150333b82daf1f86ef3ab5a34d5f97968ca0d723b8fd1b5d","ssdeep":"","tlshash":"a5515d27bc61571cec1b8d5003286656e298c83b951677faccf6972087d3e824be75ce","first_seen":"2025-01-05T16:32:23.462773Z","last_seen":"2026-03-30T05:52:47.215337Z","times_seen":161,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/css/custom-jet-blocks-rtl.css?ver=1.3.21","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/custom-jet-blocks-rtl.css?ver=1.3.21 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 10 Dec 2025 17:16:19 GMT\r\netag: W/\"6939aae3-f49f\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDCoBIiFedPjEimbxbJstATOCxC5%2FZZucZj20aA55XLd9AHcTy5in8w5jyb7uiu40BnnCveUfT2%2Ffh5RZoLWxEmetsW7LfimmQr71w%2BC7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f64be83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":62623,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (62623), with no line terminators","md5":"f6c35eee1da2bdc099c772e044d5476c","sha1":"aee683ad8cd3ee32d9a53dbeb4c1198fb66863e6","sha256":"c821c343546a1f4da90417381b2500304833cec503bfeb2597b04925800ddee3","sha512":"0b4741c27e87d18d1d679a9ec5950a3cea963f6963a51225fd5fde31e728e6a9983181d918201176136e97247394666706375f7d9824e32fea42499a78bbdc9a","ssdeep":"192:EHLbJtJ3JRJEGH0KBrCkt03q3zmevMEk+EM6YwOYdtAnA0Jh2gAXAZMMa6L/jtBi:E75vd5jVwzn2ONpKb9A2XaAUn","tlshash":"b25333038897231ad02f9904d7c87264ca38c63365a395efb7d256359b8be5d21e2dcf","first_seen":"2025-08-04T05:37:39.097687Z","last_seen":"2026-03-25T11:51:40.230681Z","times_seen":27,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-menu/integration/themes/astra/assets/js/script.js?ver=2.4.18","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-menu/integration/themes/astra/assets/js/script.js?ver=2.4.18 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 09 Dec 2025 11:18:39 GMT\r\netag: W/\"a8-6458312db4828\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVseRzHrj1pAWWZQGeyKce45e%2BRHtCtZqVJbR%2B5ZhFN%2BtPnrpyYq9XBznsaAHxsmZ0gZ8DePZXEMAz85KT6EF9JPbbgpFaHdEfbS7vcOZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f6fc1d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"6afd8e694d04bb761d00ac20c73c53e9","sha1":"bbf7acd378a807ce43a721797f0efcc7cf401c1e","sha256":"2a3509a0c39eaba33e3bd0360b3bca2328e16e09f5628982773445315099f70a","sha512":"8c53db9a6d8e7fce70e5fca5be279a0c7d546f3f1266905072665ae3eee1714a127193483da4049a9fbd9a134292ca6af1ff1dfe1ad84dc8766d43111dd89b78","ssdeep":"","tlshash":"99c08054d6d4220950b77337551fd05811f30410a105111340d742500f5a9562982f1c","first_seen":"2023-03-08T01:10:21Z","last_seen":"2026-04-03T20:47:42.696204Z","times_seen":319,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-search/assets/lib/chosen/chosen.jquery.min.js?ver=1.8.7","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-search/assets/lib/chosen/chosen.jquery.min.js?ver=1.8.7 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 04 Dec 2025 07:53:20 GMT\r\netag: W/\"69313df0-71c1\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2BDUm9MQukj1V%2F0GzrQQT69LdF2G6sB7QcRSjA%2F45A5hRhPTs1M0CzdYiKnh2ebDFvthQAyjkBuWKmE6qDGPwwqZHsEjpYtMLL0i338rAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f70c213181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":29121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28999)","md5":"3e9f1dcb9cc75169765265133fb815a7","sha1":"7678293e0a0df6f57aea34e07b7e0392ebba2234","sha256":"73881513a7e7f8944a311bea8e80e9fad946e256ae74d62b5c8d469dc6df0186","sha512":"acc186178c20d51ef77a1b67c5706de666d47cdf49509c1b936d4a3259cb643261ec190f99ea2f06e75d64210d25d7476183240a1f613c59cf992f6cb29922f2","ssdeep":"768:+Otj9+umwo0XCITm9HNfhvwITdNWb0DvHrqgtV:+ORjgF9HNfh1TdNWb0DPugtV","tlshash":"8ad23188fab0a12041f795e5a65ba5c5f337a49ce80c89acf93dddd65868c0d702fb34","first_seen":"2023-03-07T01:07:22Z","last_seen":"2026-04-03T21:18:52.634173Z","times_seen":12499,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/advanced-ads/admin/assets/js/advertisement.js?ver=2.0.14","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/advanced-ads/admin/assets/js/advertisement.js?ver=2.0.14 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 19 Nov 2025 18:46:46 GMT\r\netag: W/\"27-643f7009788d0\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vgdFdwx6k%2FS8nllC%2FXh3TbSdkrkzjeXsGm2M7Ox5%2FB3uAl5TGBLFlkRiRVvs19M1DfkKYXQUHIqdiarsdGBrRqzsxN1%2BAR91%2Bs4ZrTvXFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f77c433181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"b645b5402a5096f324a6b37d0a3259c0","sha1":"3741b4d49e4ab0034f34fdb9ce5afaf96f940b47","sha256":"2878e3b9f4818d49affee273031a409b8d24e264b58eb3f4d9b0d1195a6d2ff1","sha512":"a86a7ab81b7c02c027c34b17282d0a4150649a47534b73c86d6ea7d6109584a5f8594063227900d99d84e5b9f26b54a65654be2b75aa33b20c0a5f8700ee50fe","ssdeep":"","tlshash":"49900210815501d9b02041511d06e4e2e8904460c7423de28194400c500a540005005a","first_seen":"2024-05-04T21:47:36Z","last_seen":"2026-04-03T19:27:39.218836Z","times_seen":9799,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/11/%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A8%D8%B1%D9%85%D8%AC%D8%A9-%D8%A8%D8%A7%D9%8A%D8%AB%D9%88%D9%86-Python-1-1024x1024.png.avif","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:27.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A8%D8%B1%D9%85%D8%AC%D8%A9-%D8%A8%D8%A7%D9%8A%D8%AB%D9%88%D9%86-Python-1-1024x1024.png.avif HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%224fad347d-d169-44eb-822c-a52188089546%5C%22%2C%5B1765634595%2C738000000%5D%5D%22%5D%5D%5D; _ga_1G95R5YDNV=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0; _ga=GA1.1.358228018.1765634596; _ga_HVTEJNCQN9=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 129433\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Oct 2025 06:59:19 GMT\r\netag: \"690069c7-1f999\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xuHkP18PWJ9I89Dtg2npbJZLLD%2Bglw5%2BuzMUVnwN7nAq2Rj9%2BIv5Dv95U0NjLi2lyQpKAMqmEmd5W711qQYB9A3GexRZijZdd6MzbqE1Uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad601478f573181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129433,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"46941d7a0ba1e1c3edc9e26622579f28","sha1":"1a165642deec1808417fbaf2dfbd5333068a6bae","sha256":"9323d5314e51be941b86e6597dc2cd05b726dec906c55a0c3c6278c61e9ee266","sha512":"24eabee564506c5833a096a016d527b3de86ee0f15889e2d79560cc607cef471ecbb202af17e1baa2fa396bdc031aa800c465d975557ec076e83eeca8fec958c","ssdeep":"3072:Vv40t6mnFREFM0SPnNaJPgKRvim28RjKyEtmVlOmPDUT:i0tNngMnngPgKQmXKyLHDS","tlshash":"d4c312d996aa4713c772fbf36b47b8aa50c98dcc36549cc30c552154f2a3b3aa818973","first_seen":"2025-12-13T14:03:51.750402Z","last_seen":"2025-12-13T14:03:51.750402Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/css/widget-divider-rtl.min.css?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-divider-rtl.min.css?ver=3.34.0-dev1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-10a2\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u1f8gpdEsYcjzYQDODar2jBwS5O3vgDwA1EyDNgCQM8vTOwHOm8QlEAAZVVtyy8YQYkqaF8D7SDAvmk9j5DZaGxjSC54inw9CQUwEEotdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f63be33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4258,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4258), with no line terminators","md5":"3d78dc83d20515d554c4a45df3500bb0","sha1":"36fe7b5ebfeb079e9e20b12222766b1922382586","sha256":"f042f3243af9c3e339447b3aa8acf5776c9c12bf03b67e87013750ca5ad7fb0a","sha512":"c61feebb9eeb0cc5ef3029e7c6e94797face0f9bfb4905a51e96d2e59c63978688aff83fddea3326cc5d197e3cace6cf42c94f6cfb98ff7c6c16da61e7a28f32","ssdeep":"96:voAhZrOq52pydTYk0+5FD1852KELxrFrRevYJocO:voIOq5a75slUmor","tlshash":"a5918555b94f8218b79f141b8e173e4cf04467c9fa618a81d9f37252f0aed842f209e9","first_seen":"2025-05-04T13:14:28.472981Z","last_seen":"2026-04-03T22:31:34.426532Z","times_seen":18401,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/imagesloaded.min.js?ver=6.9","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=6.9 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:15 GMT\r\netag: W/\"682e087f-1590\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B23LFtp16dvIYFoQwDGEP1IXmUKWAgoPfUQxCy3pcbFlHGAv6287S%2BYF%2FlF76me3%2B7ohj3BFbDiFpJy4Zv68BlJr%2F2bnS6wNNYERS2mRvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f6cc0b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5520,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-04-03T22:31:34.369876Z","times_seen":147260,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fundingchoicesmessages.google.com/i/pub-6412287228353799?ers=1","fqdn":"fundingchoicesmessages.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"98:61:A1:01:94:12:1C:03:5E:13:41:74:51:6D:2D:18:E9:F2:69:05","sha256":"4E:24:16:A8:D6:22:3F:BE:06:74:9D:F4:9B:CB:DF:31:D8:E5:8A:F9:E7:B3:7F:8D:5E:50:F2:25:34:EA:7A:94"}}},"request":{"raw":"GET /i/pub-6412287228353799?ers=1 HTTP/1.1\r\nHost: fundingchoicesmessages.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport, script-src 'nonce-fGWihyOJnbwOZno0zsJ-Rw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\nreporting-endpoints: default=\"/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjWsCoxSXFEKQhxdB68xzrVCDuWnSedRYQGypcYnUE4g_1l1l_AHGRxBXWJiD-VHWDVaj6BmsS-03WIiA287vNagfE1e5ebM1AbOvvw-YKxN-KfdnYSnzZ9v33ZTsGxHtz_NiOAnFmpx9bIRDrbPZjMwHi83v92K4D8eqbfmybgXiFlz_bBhD282fbAcRCPByLn3w9ySaw4N-KD4xKGkn5hfHJ-XklRZlJpSX5RWnJaanFqUVlqUXxRgZGpoZGhoZ6BubxBQYAQlZRcA\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":220479,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3181)","md5":"e6236e2f3d3af024fb508ec76383d73d","sha1":"de9541e00ab860c904e618d24d878df6a9e31f5d","sha256":"30e3027dd26b274c39fe3be1725470eb06521c9ab757da77fda00cbb26fcdba1","sha512":"4692182b205c9b7704e279ff04954f3ca835b527430b3d48d8df40dcfa060153568209b6d5567c36e188921869fdf1c6525b61e3aac0278be546401ae44ac5c1","ssdeep":"3072:Fd045qrKQiH2BV7lvDzlVoXmUjk5jIS9kB8gBSk5Drd44Wplm:Fd04obvDJVoXdk5jI7BUk5Drd44Wplm","tlshash":"1324949872d2b4a6a263f8b5402f400ab17f68a3e44d8c6cb2a5ddd17ef04499137f7d","first_seen":"2025-12-13T14:03:51.752465Z","last_seen":"2025-12-13T14:03:51.752465Z","times_seen":1,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":100,"dns":276,"connect":20,"send":0,"wait":45,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/06/cropped-Logo-Fav-500-192x192.png","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/cropped-Logo-Fav-500-192x192.png HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 11436\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 21 May 2025 17:07:39 GMT\r\netag: \"682e085b-2cac\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dhdqyumTFGwXXGYHdcKMX1jNvzGmofXyq2egOKXdlHd0oOExyMTq1FBqvo2iP5XYQfWYShVdxM4md%2BVKLOW1anJBdeulAhAUgFGiR%2FW%2B5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600fd2d103181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"bb50b18b27929fa99744c1cb60f662a2","sha1":"dbb047f95cd6b35d57943b3e034df7019f3c576f","sha256":"6fd00dc1970ea5c64be0773abe5879388eb35bfcfe3a0f184a05506de71bee1a","sha512":"a8b645646e9e7870d822d9e0ea3783166d76b4b03bb13a8d0c77f00cc72b5ba1f8f2ffcb19d9c1d3adf55e04461faea688289ea634b2c2ba00abdc59ec2be237","ssdeep":"192:M/h3gR35qQ21GFM8eHkz7mduEvLm8CWFK6vD00hdOTnHgewWRM2BjwpL2JldUnm7:M/NC5qQXFeHI7yDFCZ6g0hdOTAewWmKr","tlshash":"9332af8a836d280113ee7c6471a559edb39ad182405266c12b07ac102c77a999ff6e66","first_seen":"2025-10-24T18:33:48.453883Z","last_seen":"2025-12-23T11:53:47.367591Z","times_seen":3,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/11/%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%AA%D8%B9%D9%84%D9%8A%D9%85-%D8%A7%D9%84%D9%84%D8%BA%D8%A9-%D8%A7%D9%84%D8%A5%D9%86%D8%AC%D9%84%D9%8A%D8%B2%D9%8A%D8%A9-1024x1024.png.avif","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:21.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%AA%D8%B9%D9%84%D9%8A%D9%85-%D8%A7%D9%84%D9%84%D8%BA%D8%A9-%D8%A7%D9%84%D8%A5%D9%86%D8%AC%D9%84%D9%8A%D8%B2%D9%8A%D8%A9-1024x1024.png.avif HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%224fad347d-d169-44eb-822c-a52188089546%5C%22%2C%5B1765634595%2C738000000%5D%5D%22%5D%5D%5D; _ga_1G95R5YDNV=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0; _ga=GA1.1.358228018.1765634596; _ga_HVTEJNCQN9=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 102838\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Oct 2025 06:58:50 GMT\r\netag: \"690069aa-191b6\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UGA3FWjCkivAFK4vJSa7un1FdpJCQGpDJzKESJluHxfu2Ww5Eb8kUBBXrxKGgVcwFJZecbA734Gl88ozvZu%2F0yukA6vTL506OuXT2F1q7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad601264a263181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102838,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"4779e7fdfe7abc54023d293fbe8d9109","sha1":"ce8df3c3f54036c524ab19cd22f04b59674bcbd5","sha256":"86447ffe55e26ff8ec6f543a39aaec0925b70f005da6624a63393bc65c988e97","sha512":"f79bc9af32cafefc81f4e0b0ee586cb53abf326d7c9a759d43579a84980cd88f7ef859fa1f99fce4852610f509cecbcf3f31b877d88465fb2eeafad511cca0e6","ssdeep":"3072:5Nv8VLZNAfOg/BlqXoSVsPLGQsUvbgRS7KzRvOxH64:5xg1CfOg/jqXf86jcvcRmxn","tlshash":"dca3133f34159519f2ef20f1250a422d8a0ba7ecb9879a71366071d43a7dc6edd18dec","first_seen":"2025-12-13T14:03:51.754263Z","last_seen":"2025-12-13T14:03:51.754263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":102,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-13T14:03:13.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 14:03:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.1.33, PleskLin\r\nlast-modified: Sat, 13 Dec 2025 13:44:18 GMT\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uyj1BBa6bLljhMvdblz0R3uFKZusQqfthTzDepfIWxo5A%2Brvr665wrpUxajKKien%2BCjSCJwCzMS1LdxzemUGCZV%2BiVoOoG%2BUquOR%2Fn8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ad600f37b27569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"JetEngine","description":"JetEngine is a content plugin for WordPress that allows users to create custom post types, taxonomies, and meta boxes, offering flexibility in building complex websites without requiring coding skills.","website":"https://crocoblock.com/plugins/jetengine","common_platform_enumeration":"","icon":"JetEngine.svg","categories":["WordPress plugins"]},{"name":"Elementor Addon Elements:1.0","description":"Widgets and extensions to extend the Elementor Page Builder.","website":"https://wordpress.org/plugins/addon-elements-for-elementor-page-builder","common_platform_enumeration":"","icon":"Elementor Addon Elements.png","categories":["Widgets","WordPress plugins"]},{"name":"MonsterInsights:9.10.0","description":"MonsterInsights is the most popular Google Analytics plugin for WordPress.","website":"https://www.monsterinsights.com","common_platform_enumeration":"","icon":"MonsterInsights.png","categories":["WordPress plugins","Analytics"]},{"name":"Funding Choices","description":"Funding Choices is a messaging tool that can help you comply with the EU General Data Protection Regulation (GDPR), and recover lost revenue from ad blocking users.","website":"https://developers.google.com/funding-choices","common_platform_enumeration":"","icon":"Google.svg","categories":["Cookie compliance"]},{"name":"Premio Chaty","description":"Chat with your website visitors via their favorite channels with Chaty by Premio.","website":"https://premio.io/downloads/chaty","common_platform_enumeration":"","icon":"Premio.png","categories":["WordPress plugins"]},{"name":"Elementor:3.34.0","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Chosen:1.8.7","description":"Chosen is a jQuery plugin that makes long, unwieldy select boxes much more user-friendly.","website":"https://harvesthq.github.io/chosen/","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Underscore.js:1.13.7","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Site Kit:1.167.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"imagesLoaded:6.9","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":416299,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45210)","md5":"19f94da92e898f24274a16e90860ee36","sha1":"b321266a87ed45750226eb22914f47801f015b63","sha256":"52241da286805f468b95cd69530005c6a95ecd2f788f3aa06791749faffd6e60","sha512":"c84641438352165b9c49c4ce888dc1dc088a8296410c53ad29d7fc740ac5e3beeb85dde23ac4f701a87da04a68ec9d84256d2898982d35b20652ba9148a942b7","ssdeep":"3072:72Ga9nqpphlGsK89yw5GyqR/YQF34eLEAAdhz/ZpDpLbb5YXrLxQf0VsLxQf3vUC:72Ga9qjhlGsK89yw5GyqRptcdhj1lHZO","tlshash":"1494c7613d53403a323f536fa023b65ca0699de7c61da6e1f97e812af3f5e913391608","first_seen":"2025-12-13T14:03:51.755067Z","last_seen":"2025-12-13T14:03:51.755067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":34,"dns":12,"connect":1,"send":0,"wait":123,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jetformbuilder/modules/switcher/assets/build/switcher.css?ver=06c887a8b9195e5a119d","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jetformbuilder/modules/switcher/assets/build/switcher.css?ver=06c887a8b9195e5a119d HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 30 Nov 2025 12:43:58 GMT\r\netag: W/\"692c3c0e-70b\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JYglXpMW%2F%2FA5wDw979yvs3QopTd4iMVgb0h9ecb0ZL0paPWqg9k7c5iqMum9R%2BPL7k1foFGc24q8u8B4uK9JImEAEphjGoulQI%2F2o6lJuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f61bd43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1803,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1802)","md5":"3bb23a88e1835e239965798d1c112d79","sha1":"540f04ea2d8e1b4fc08c292afcbe82d37878285d","sha256":"cec69effb427981da0dcfbb4179117bdd1c9ec20fe2154bcab2ab0e3549b89ec","sha512":"2f7c1e1f2275da069497515a3e4daca7309d33a4831a8f3792085925c062c7911e788d3a6c12b68901c8d9a57288f0178b544b90cb3bd112eed6f40e5aaca320","ssdeep":"","tlshash":"3b31d4d6fd80c0b6bc23631a7fcc525c9e2e60b09d1844e4db0dd5e2a5cb1f658a1ba1","first_seen":"2025-06-05T20:53:14.104899Z","last_seen":"2026-04-03T16:32:37.928085Z","times_seen":762,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-blog/assets/css/jet-blog-rtl.css?ver=2.4.7","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-blog/assets/css/jet-blog-rtl.css?ver=2.4.7 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 10 Oct 2025 17:11:00 GMT\r\netag: W/\"68e93e24-a9b\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXqDZBbT5Q73F%2Bdn509yuqvKUH9XAURao9AhF6DByA2KsO8KzIiN1DbTPU7wsrcjp9VqDLHHguBAARMjd%2FnDJEZNteuM%2B9lRyQP9pzjFTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f66bf53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2715,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2714)","md5":"5f386bcdbc1ad2210bee0e40f587f0f5","sha1":"30730f833826d18569656df3783800b9cf2c4e23","sha256":"83be08edcd37e3ccd113f6d6d08a971a1c1999e9e463943faabf100798c519dc","sha512":"b8fb40da18de3c92dc2698a45cc82b5bb4c5e72b50c73dccaf1bb1f5bd6b2470f11462a48f6f083784a60d9254deb1fec7edecbd46aceb67e887d5b7348695b3","ssdeep":"","tlshash":"2e511209386f2b9f80a3e03757e5d5ccf99a7972c6e7e5c2f2122635839db8908c40d4","first_seen":"2023-05-24T01:37:30Z","last_seen":"2026-03-22T16:19:10.597835Z","times_seen":35,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/11/10-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D9%86%D8%AA%D8%A7%D8%AC-%D9%88%D8%A7%D9%84%D9%85%D9%88%D8%B4%D9%86-%D8%AC%D8%B1%D8%A7%D9%81%D9%8A%D9%83-1-1024x1024.png.avif","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/10-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D9%86%D8%AA%D8%A7%D8%AC-%D9%88%D8%A7%D9%84%D9%85%D9%88%D8%B4%D9%86-%D8%AC%D8%B1%D8%A7%D9%81%D9%8A%D9%83-1-1024x1024.png.avif HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 118387\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Oct 2025 06:55:14 GMT\r\netag: \"690068d2-1ce73\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=slUyCcXnKhnuwtmCY20xqOiFYzeXgmXme%2BFGQtoK22jYMQOBxolJs1lL3JogsIQNUmjbe0XJAbCW345OZcuoTufcpplnzE4JCsvKotc7Yg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600f6ec1a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118387,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"a428580e5deaf6d8570497995374478d","sha1":"49bc7429e88a881d4a0152a956b7c7338279e467","sha256":"5f7e556fe6d246d19514e015ba4e6204b47020d3042276e2ccf3d316dcb246f2","sha512":"b5b2cb3b5dd45979ca2a08106ed0d1a8270f60e43d4114bb1a64d6a8a99f0965846ebc021fc228c999b66a513e8ae243134120660b5b3c11efb91b9df21ff981","ssdeep":"3072:EODXqyO5UTe4nvPbP/p4+In6dd1+8pMQIkw7+OoB0da:FqyOWemnbm+In6dq8pMQA7jjE","tlshash":"bfc312d92581d251f9968bb08498d97042936843135187d7cc29da33ef3f3ebd6a2ca7","first_seen":"2025-12-13T14:03:51.757407Z","last_seen":"2025-12-13T14:03:51.757407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/e-202550.js","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /e-202550.js HTTP/1.1\r\nHost: stats.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/7134-1748959716663.3035\r\na8c-edge-cache: cache\r\ncontent-encoding: br\r\nexpires: Mon, 07 Dec 2026 16:37:03 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-nc: HIT arn\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3812,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3812), with no line terminators","md5":"b1e85b83d13876fefcf2d873fde8da3e","sha1":"09d271f2a7dd17e66a19fcbfca887734d951ed2f","sha256":"2abd616c43c16e7a2d01f1f1c761d6c12acf4b2ed9a9a411289ee3bb5a681ffe","sha512":"a1ab2e32190702e46c440606a45e51dd073168fa11828683764aef077fb2b495343bd91ee784974244c37d0a52a8225d1a6359ffe0ddf0ec6971aeb7c50e3ec8","ssdeep":"","tlshash":"6b71646536c5f0381af630a5235f630af5ba8b7a7d4a9044c37cd4b07c79e8b9412f9a","first_seen":"2025-06-09T00:15:30.881783Z","last_seen":"2026-04-03T22:25:02.385599Z","times_seen":45005,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":7,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-engine/assets/lib/slick/slick.min.js?ver=1.8.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-engine/assets/lib/slick/slick.min.js?ver=1.8.1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 04 Dec 2025 07:53:14 GMT\r\netag: W/\"69313dea-ab79\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbVg5s5B%2BzrADwvjjWgPQfVTKecjqazw0itbX3u6MqHD0Entl%2FjcyYpH2%2B9aiJ7RoJbXfxFX88QFoipnIoT4s2JYPUEATkWQ1rJfsiiHbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7ac503181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43897,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43897), with no line terminators","md5":"5d735b35ec9f028116aa437002bf2e8d","sha1":"d7ed2df9790f729366480432543398a7fcc61508","sha256":"f5fbe02aee527b19f8afa6afa3ff5158797054a518762f0f6f9a904438c38c90","sha512":"e165682a82dd0f9cdd947328bec2a2268a7d64cc9932321435c5da49344babaa2b045a5d0c2fe81fa6c873e568a08af0505a4da1cc6506be0ead882259aef63b","ssdeep":"768:G7VPetHFVsb8S8AGltPBH76Kr4hB9Aojq4nQB2AF4uoa+hV6d5dP0I17G:EgV7TPBHHa","tlshash":"9013620ae210176299d711e12117c50db3fbf73db522c0ac78e98bdb609d9089ad77fa","first_seen":"2023-03-07T17:32:17Z","last_seen":"2026-04-03T19:45:13.34061Z","times_seen":5933,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?v=ext\u0026blog=79183875\u0026post=100408\u0026tz=2\u0026srv=www.farescd.com\u0026j=1%3A15.3.1\u0026host=www.farescd.com\u0026ref=\u0026fcp=1052\u0026rand=0.7298537501992947","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /g.gif?v=ext\u0026blog=79183875\u0026post=100408\u0026tz=2\u0026srv=www.farescd.com\u0026j=1%3A15.3.1\u0026host=www.farescd.com\u0026ref=\u0026fcp=1052\u0026rand=0.7298537501992947 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-04-03T22:25:02.390131Z","times_seen":78117,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1G95R5YDNV","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"14:1E:23:68:0E:D0:A1:C7:ED:6A:FE:20:1B:06:FE:F9:83:B2:99:F5","sha256":"61:AF:E1:FE:D1:A6:4C:C2:5B:60:60:94:B3:7F:5C:5D:34:BE:8E:AB:21:42:8A:97:07:E7:8A:B7:2C:91:5D:0D"}}},"request":{"raw":"GET /gtag/js?id=G-1G95R5YDNV HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\nexpires: Sat, 13 Dec 2025 14:03:14 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 130058\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376144,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"e65015378c56513a2e8b9859e03388c0","sha1":"22d13cb7f106fef192a20bed39e98f7d1a140cde","sha256":"04b64fb6908f6e65758285af4608aa861f3be8aae52594a9777a58c4ed3eacf0","sha512":"12617e4fa3c798ccd9a889860dcf3091e87fa83e5eaf907c82d141db853d6b232109d24da8caa597efcbc32d806c746b8d7d186dd2042a6b2a67854918f3bcbf","ssdeep":"6144:Bw7nTmwObujKYz1U95efDHHYOyQFzvnsyOZW5UjaJddpC1u4:0T0buNz1cEVnsnWJNpY","tlshash":"9c8419cd73c670669392a078503f118ba57b69e2f44cc895f18acce42e746aa4237f7d","first_seen":"2025-12-13T14:03:51.759674Z","last_seen":"2025-12-13T14:03:51.759674Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1276,"timings":{"blocked":550,"dns":0,"connect":21,"send":0,"wait":46,"receive":55,"ssl":599},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/elementor/google-fonts/css/cairo.css?ver=1736346710","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/cairo.css?ver=1736346710 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:12 GMT\r\netag: W/\"682e087c-3800\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Y5YGwEAM%2FDwCDsB68bnFX2RRt8Q4yn1Y9iWmi%2BBPiq6j%2FJAVzZzuwEHaisXp1JTE1RRcJlNqQI8xkfAkMI6lgAjr4tEbxNrDQFSUYYk7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f6ac053181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":14336,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (649)","md5":"f5d200e0adc0349d0b9c73da6ca6e023","sha1":"ecf2d73ebf1a4aadcdebf8e64389a83e9ea49a7b","sha256":"bf925573bea8afa35db3c7b65d449cca75714f41abd93e667fee7b5e81b73022","sha512":"5e59bbdc84319aacd0ce3fe0f9bdeee88cf270c86a8ee5b5767be7111c612fe61fd664490fa6d520c1fd5db10a25193f910d8f09afb0896aa63ed26b8d78d8db","ssdeep":"192:OZClGJZOZCl5JmDZClQJb4ZCl7Jw9ZClyJVaZCl1JS/ZCl8JHUZClnJci:LlIlhlqlDlkldlWlb","tlshash":"9a52cae01c1e4284bbab1ac162882927cd0ee2997084896d97fe178fdda7c257391399","first_seen":"2025-10-24T18:33:48.358051Z","last_seen":"2025-12-23T11:53:47.350266Z","times_seen":3,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/11/12-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D8%B3%D8%AA%D8%B1%D8%A7%D8%AA%D9%8A%D8%AC%D9%8A%D8%A7%D8%AA-%D9%88%D8%AE%D8%B7%D8%B7-%D8%A7%D9%84%D8%AA%D8%B3%D9%88%D9%8A%D9%82-1024x1024.png.avif","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/12-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D8%B3%D8%AA%D8%B1%D8%A7%D8%AA%D9%8A%D8%AC%D9%8A%D8%A7%D8%AA-%D9%88%D8%AE%D8%B7%D8%B7-%D8%A7%D9%84%D8%AA%D8%B3%D9%88%D9%8A%D9%82-1024x1024.png.avif HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 139867\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Oct 2025 06:54:06 GMT\r\netag: \"6900688e-2225b\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pf8HXbQxYLBk3oQxI%2FVfXKMR4CCTmQ4495ywHsXJo3TZ9%2FPpKUOw1Qo0TbXNaoDrCvixdGq07K7bTAaVz0uNDFpvmu1sSYUTuOaiV3H5Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600f6ec183181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":139867,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"5df337cd3c8427d6421d24b54ccdcbba","sha1":"37973e77b31ccf46f6f68b2a916fb9034cb9ea53","sha256":"f6784c3fba6fd1c4791525668ed9498fbb5ebd7c7460c4c53a006cc357298285","sha512":"ffcecd5171d1dcf672bc41a2d957d1e8f61013dfc2cdd9721a69b3b1d07f8c9337be423309d5c74662d495eeb7b48e15611cd60dd65feec52c51417c0bc0d33f","ssdeep":"3072:szB9AymapUyJjIDFAx6j5Ond+nr88Oi20xRieUJi1lEVCMfGf/acqgygN:AffmmIDF2wAndvL6hU8MfGf0Y","tlshash":"61d312ad55a83256ec9113b5dd91e101c289cf300aecfcce22e13629bef958979c7f42","first_seen":"2025-12-13T14:03:51.761212Z","last_seen":"2025-12-13T14:03:51.761212Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.min.js?ver=2.0.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.min.js?ver=2.0.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:36 GMT\r\netag: W/\"6938058c-588c\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JuIO5bgRtF6qX34vtZbHOTk7CzqP6GLqX3GcJhbNmpaCAG4WR4W84hnns7x8m1cvlj%2BAplqkrso6dSt7p%2FGjuptuy4LIXH7EyoUtLN8%2FCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f72c2e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22668,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (22668), with no line terminators","md5":"840bc5b942ea05522bf35feb8ade5378","sha1":"fb7eb0d722a1ad0e9565900e7b78a47d9d0a8ce9","sha256":"3b8a7ce918988d5ab64c2a26b6a87a9e08e2f08fbe4e7c20a3a98bc10d264945","sha512":"32c9433ee62100a3fd988bd99d991ecb3afd4c916447733541f17d874562f87f3469ef1b7a641e439ed8b68cebb0c174d43a95ac7ff15ded451c1834a566e30c","ssdeep":"384:xfJQ/vWKyCN3yHEPepmc1enbAMJOZzb7b:tafgMOZzb7b","tlshash":"b2a2b44d33f73e77339a72e04bece1128b74a4d2399b04b0f93c667da5255a601de6a0","first_seen":"2025-09-28T21:35:49.152141Z","last_seen":"2026-04-03T21:25:08.016683Z","times_seen":375,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/chaty/js/cht-front-script.min.js?ver=3.5.01692173004","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/chaty/js/cht-front-script.min.js?ver=3.5.01692173004 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 11 Nov 2025 17:55:29 GMT\r\netag: W/\"69137891-17543\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fbm4yVDgx5DYWwnIMoP4r49imiz1z8s4tgI1t%2FxkfldY%2B0%2BmR5VZHexeBFwWtLmSko4fSCLBdHTy9zPL7OnVFvlzh5Wazh7FWgnLbOGgZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f77c443181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95555,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3e8fc11b9f5a4a074e696f4464342a34","sha1":"ac47a68750a64907beef8fed9bb21dff14722498","sha256":"8b4fc77720f9ad21c6d55ce9fbff438bcbe55aee69ffe18351b5c6df13ec380d","sha512":"c04d988a531f21676ce4899438917ca879c429d43bec7c3fc8e3ff757ab88ee558a4aa22c18cf7e4d10c5a8d821dc235bfb3063bad5687825adcfed4414255da","ssdeep":"1536:pmuxWOBvYmFRWMDZKk61S4WySb0SK91a+Ua2c7kQAd928kAFUUSY3wYSGPuT8Eud:TxWOBvYmFRWMDZKk6IySbdd928lc5kAq","tlshash":"2293db51e214a4be00ff136165fb7124113de1faec0489b165b9d1f8856acfef02afa6","first_seen":"2025-11-04T14:42:27.139276Z","last_seen":"2026-04-03T22:20:59.543118Z","times_seen":1812,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.33.2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.33.2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 04 Dec 2025 18:47:26 GMT\r\netag: W/\"6931d73e-5def\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MF6R0w4U6gT2jLWXm8F9GyFIPbmF01GJfTTnMMXmHuDYPLSBYKTjV0UGd8o2ubfHFJxFG%2F5h6OuET8sOt6J%2BUxmhq6qn06%2BOjo9%2B7P2JWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7cc573181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":24047,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24003)","md5":"f25fb58f129d8168ebb0731e163af8d0","sha1":"bc2cf9a4fe960e3338afa3ea4d1c275d2cc2910b","sha256":"ef0448874287e9819d972a45fde8aeca2f9208e7faacc452e2512031b2fbfc02","sha512":"3307b4055e9604d4f452504b550c34e37cd3761640109c45727206f42771b8da07b200fa438dcb28f92d6ccaa174e055855b6d333c019259e90ab018f31b9346","ssdeep":"384:rGy+EVxFm6cKJskdHd7glQtHuGJswg/i+TSQDTWmMo7YtDT5HJiIqkoh+vFWN7Kh:rR+EVxFm6cKikdHd7glQtHuGJswg/DT6","tlshash":"eeb2d9063163ac3a50cf815be067420e7b374995b40570ed7abc6cdba5b8d9a33ea335","first_seen":"2025-12-03T18:56:43.396609Z","last_seen":"2026-04-03T22:32:40.178961Z","times_seen":5527,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.min.css?ver=2.4.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.min.css?ver=2.4.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:36 GMT\r\netag: W/\"6938058c-251f\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OBbXIGqXFTL3xCnGwuHA6ba%2FbXhWySlA15OUtoUDks0oqDY4gMNXqPKhAqEC2SrQBO6FGgBYHJzyV0UeWNlPHFisAna6zx5B9fFxI7mNCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f60bcb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9503,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9460)","md5":"ad8951d990d1a059fd0829ca7a0d0c0f","sha1":"28b0ae7729687b598475b6d63e630f6544847652","sha256":"796f7b42768f7f383b5a92ae4d463e50462b8c37e7f140129a7629d95917b2f4","sha512":"005ad454bb13cf816746ea9c7128a2abdf9cd2ae9da31941673d8d4235c274a0903d5482b68c2dc57e60f7ee4a7532d3c9c6f999691b28b9f1d87372882ed9b5","ssdeep":"96:GfZ6krWk6dD/NdDnGd36gj9d3WAut6wW69GMatHv:GfZZWkI/PnidWAut6wW6kHv","tlshash":"85125d99695351cc8037479dd3da0a588e3fcac326616cee7344280b5353bedb2ce6a7","first_seen":"2023-04-05T14:18:03Z","last_seen":"2026-04-03T21:25:07.980039Z","times_seen":2618,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-theme-core/includes/compatibility/themes/astra/assets/css/frontend.css?ver=2.3.1.1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-theme-core/includes/compatibility/themes/astra/assets/css/frontend.css?ver=2.3.1.1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 04 Dec 2025 07:53:22 GMT\r\netag: W/\"5e-6451b9f7c8b88\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WxnBDJhMCf4%2Fo8MHcTlkNqWNgxCdTXPExSM9ZVm46HuhgaEPWRSGipeNh6783Gv6jCIcmgkwDr%2FhEexhM0rKjt%2Fweqbz7Y0S8EcGbD7wsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f62bd93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"92a944bcf8d3e9b74f93d94b920f9b99","sha1":"db429c0b4a27f8c9121904d75a4f433cbafcd954","sha256":"1a8ac82b380007ba9ae238a2947b9d76a473b28b6f9a5d65dbfe0d32e948b1e2","sha512":"a929f40171d6b66b06c24b3b76ace232afde364553e46ab5d00ed2ec14da6f11339a066fc3eda1053597eb097da31f00d7537322b0f857d1a563b2f76e8ae3ae","ssdeep":"","tlshash":"3fb012415b30019b61f4820ccd90324d8324e027f24c28d8a40cc2e1d8ce304109458b","first_seen":"2023-05-11T05:08:21Z","last_seen":"2026-04-03T01:22:35.153288Z","times_seen":165,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/themes/astra-child/style.css?ver=1.0.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/themes/astra-child/style.css?ver=1.0.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 21 May 2025 17:06:43 GMT\r\netag: W/\"682e0823-490\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2J%2F89EkNIP2Ty1pQgsrG1dfJ%2F9axCoJBrdAGHe1jh26nJv2KpFczvRaNWQUs6YPdsYB%2FRP9bWFW%2BfOF4cdMPn7Jtz87%2FjUspNOeB8gzLQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f69bfe3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1168,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (916)","md5":"ad1025d9972c72bd8f7041d75da62044","sha1":"fefdf0582844a190ad2882cb7278ad26cfad7761","sha256":"bd610140c3b0c79fdc730b65ebfbb7f8f9b24f44e9e4c6f6bd9d9e8dc395cc88","sha512":"588072ccad5157e55eb6802b962ee48d442d43da8c6c99b4d075f6f5695f1244ac11aa9325c1d4bcba221afd5b4f9c1be8448d82eb46b03ec0e74d40868a68af","ssdeep":"","tlshash":"8f21a717aa1037782ce3827165a991c1bb80f34193608031d94fa3882791e5e437f37e","first_seen":"2023-05-22T02:45:12Z","last_seen":"2026-04-03T04:58:34.521189Z","times_seen":731,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-search/assets/lib/jet-plugins/jet-plugins.js?ver=1.0.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-search/assets/lib/jet-plugins/jet-plugins.js?ver=1.0.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 04 Dec 2025 07:53:20 GMT\r\netag: W/\"69313df0-1951\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=21uy4ZsRfuBaMObmkUewGs1ipqLo1NFPEC4aJISX8KU5ReG%2B8YFsITQCynvEGenGsyoSZrSE76j18FYqGtK7FM6ZVv%2FyQCFYiAleLweERg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f71c243181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":6481,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6481), with no line terminators","md5":"271ad1f3a3e724e9f2620c09d616cb71","sha1":"699fad2ef3e754bce2ddc747e8666515401839cd","sha256":"d98bdd8d9c4da34ca6f4639dbccbfd3d45154788793091ef016384411c97759f","sha512":"6e41d37de824c5e0ef341fbc7afe3c896401965a806987a412c5b66aedd44f485929e8a85dc23b3028859094a903d93a752abfd51ec130fa7423a459ecb58cc9","ssdeep":"96:I5eDE/3sy4Xf/2rEB6uaOUpmLK0phRItVKZyORVTpe0Xg9HqR5ktRKUKxN0kgDRj:I5Mg3WDBBaObfytahVR6HEQR5kBnmbZ","tlshash":"52d14488759374b196b3a016983f2546b27ab625301ec4c4e52dd4b02ea6dcf90b7b3a","first_seen":"2023-03-13T13:56:05Z","last_seen":"2026-04-03T20:56:11.058946Z","times_seen":7629,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.min.js?ver=1.14.4","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.min.js?ver=1.14.4 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:36 GMT\r\netag: W/\"6938058c-101e3\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n81m3VL8mr7b0j53QD9TeNMM%2FEqa1Qbbl9N86YB5PcdzYAOiAz7nsZDEBL2hbLwNvuOQ1kUogd9ehoS5%2BDieWfvolIoE3366GeOtye79yA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f71c283181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66019,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"26c498b0876f609720887d9651fa4122","sha1":"7eac0581622cabd86f49d3a22e67c0cb6e13354d","sha256":"285b57b8d0bd9182e9948c778b19823e4fbc5e51f3d10ad4624783bd16d6993b","sha512":"08fe1c369fe4d2d0e63bcd3c3685d45a886c490f10162daab6cde1f0798aee7efb4e2c732991b393e55cca39ca1f23ae2399111e7ca8303842f77b9ba2e5260c","ssdeep":"1536:LVT6t/OatHBaF3uwq0B5HHeqKAC8EMiEywgGQVULj0Zia5uLQhp6D8D:RDatHq+a+q0w0VULjG","tlshash":"635371a1302035f220af557f216b62983171ac7fd1064c98b07ac57d1fbeee12776b6a","first_seen":"2025-12-10T07:17:04.819046Z","last_seen":"2026-04-03T21:25:07.933971Z","times_seen":431,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:15 GMT\r\netag: W/\"682e087f-5db\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=elrr0kpKxPngScqodBMle0toqOZ0pwho34sHsWUhkhyT%2Bx7q5cT0pDzzsmK2pOmkxfbRTwkQqCAh4a7duBiYTU4VomI8zuUCojvDHLY8dw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f76c413181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-04-03T22:26:48.204212Z","times_seen":63499,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.34.0-dev1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-7c88\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2N0rQXoUTzt9baCOBUpwaktDEYDL5e9E%2FB74tKqibrkg5QYFAGY0k83q0LwKQxMJh0nxdZLCitycPWfcueO42hVDtp3f4DHkuiJUyogIug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f79c4e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":31880,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31880), with no line terminators","md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-04-03T22:36:24.512201Z","times_seen":59859,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/06/%D8%A7%D8%B4%D8%AA%D8%B1%D9%89-%D8%A7%D9%89-%D9%83%D9%88%D8%B1%D8%B3-%D9%85%D9%86-%D9%8A%D9%88%D8%AF%D9%8A%D9%85%D9%89.jpg","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/%D8%A7%D8%B4%D8%AA%D8%B1%D9%89-%D8%A7%D9%89-%D9%83%D9%88%D8%B1%D8%B3-%D9%85%D9%86-%D9%8A%D9%88%D8%AF%D9%8A%D9%85%D9%89.jpg HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37005\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 24 Aug 2025 08:59:03 GMT\r\netag: \"68aad457-908d\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Feey3V%2Br3UnL6mcgl5Iryziueg8NodIGqjCqEJorBVJ0UXR0sHQNGiUwyAbA%2Fo7Jmw9pan9qzGU%2Byqt5N5qJCA%2B%2F7InHtw30kT9TEkVciw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600ff4d7d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37005,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1440x300, components 3","md5":"f60c1c77ab6e4dd8b4a3e1cd3e32776b","sha1":"71e587dfc8d854080c86c6f56929aa0fd81787f6","sha256":"39de86c5b189256214a092eae002796815729050bca777f00f78c48a03d45a3d","sha512":"ebb2bb141ccbd34ce1b13e7cd281602da78b69401311f609693212675abbf64be5cd8debb3ceb2ee953e96228efe0781d8968eb4473b4b1130d11e5cad51bc99","ssdeep":"768:dTpy9vohMLTf99q4bsYGe+Q0rmkfXB5np6VaQU9J8SrYlzCs28irwQ70:d06MnXb705Mk9lryCs2TwQ70","tlshash":"1af2f139708c9023e5e510b86ec9b295fcef2c67d9ba5421b39c6aa4df3d60496f20c5","first_seen":"2025-10-24T18:33:48.395706Z","last_seen":"2025-12-13T14:03:51.767034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXgc1nY6HkvangtZmpQdkhzfH5lkSs2SgRjCAGMQ1z0hOA-a1PiLA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:20 GMT","end":"Mon, 16 Feb 2026 08:40:19 GMT"},"fingerprint":{"sha1":"6A:E1:8A:53:22:10:0A:EA:D5:8B:52:AB:88:89:E1:9C:72:AA:70:85","sha256":"F1:22:A3:0F:EE:FD:45:B1:E4:FA:14:E9:E4:1F:83:3A:81:45:61:0D:5D:82:48:E5:DB:D5:5F:95:60:4F:8F:DE"}}},"request":{"raw":"GET /s/cairo/v31/SLXgc1nY6HkvangtZmpQdkhzfH5lkSs2SgRjCAGMQ1z0hOA-a1PiLA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.farescd.com/\r\nOrigin: https://www.farescd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 12 Dec 2025 18:33:58 GMT\r\nexpires: Sat, 12 Dec 2026 18:33:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 70156\r\nlast-modified: Tue, 16 Sep 2025 03:39:30 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15016,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15016, version 1.0","md5":"15d93d350d064bef11fe7f37522bf111","sha1":"1f77ec4258fe0666f584b589dd126a28552b62ec","sha256":"1e12ba8a71e04bed2e7d75c3bb3f147b8650888a6a4ccd56c12931601ec3afe6","sha512":"4bf3f306f2aa96cdc1f2cf0d675af33e228908eb930a1e853b2cb082388bf52b2c97a09ac4742194a7dc7b8f1515d36b66ee7f48b2de14e34ecdea2b920071f7","ssdeep":"384:3YiFlxrJA6nloZiEdBg6M39F/Qw8K+HIiRgITV70AE:BFlsEygZtFom+dRdV70AE","tlshash":"b562cfe7e003bbfcff1c6df27e52696dab5884f1602459ba81a01e13139704b035a7a2","first_seen":"2025-06-04T09:53:26.484104Z","last_seen":"2026-04-03T13:45:56.531386Z","times_seen":602,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":490,"dns":0,"connect":29,"send":0,"wait":28,"receive":9,"ssl":530},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/css/widget-heading-rtl.min.css?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading-rtl.min.css?ver=3.34.0-dev1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"230-6458317272a78\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZ4VMqT4NHO%2FEpFuNo%2BFvVivaU7hGBNpwIyi7ulsS1wyhdMLXe4miQF%2Fe8fcBDRWsJVVWgVtmSO3%2FgfPR30h%2BStJ%2FwAmJ9sW%2FnSBgmW7hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f62bdd3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-04-03T22:31:34.493298Z","times_seen":56667,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-13f6\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rxE%2F7IKUFZWQvcik4MSG2cpp4au1JSOgqLOJdzIZFIYedcNHyKe8BOrMjQ8YbuyXwWq0ou4INUwHF2sbVBwr0CeHeRbai0TdF60qIWYe5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f66bf03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5110,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5110), with no line terminators","md5":"d026a17938c5380cc610572fdda43f40","sha1":"2b5df61e56b7fe1dfb88f1707d4b017909b02a75","sha256":"91079644ee1e76145b30c207470b56866770b0564f0fbf1373ab8b11d94f8c9f","sha512":"00dd387f3726c15e71f2f7379c4fd3bdef41c2d81d73f22f3212991b4d18d4b663ae89906722fd9e188606c1061f3f8b5472deee2cd514680e64a29f8193cd66","ssdeep":"48:FDoWozmcbWsiYPt3U/vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eoL:5oz/WkBUHjfQL7aFu2if3Jf9HL","tlshash":"e5b17651be4f9586321f002a0993f309d05a12c5dc8c6f78f856b16e59b6fe43a73eb2","first_seen":"2025-02-28T14:24:31.329664Z","last_seen":"2026-04-03T22:32:40.254864Z","times_seen":36970,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/td?id=G-1G95R5YDNV\u0026v=3\u0026t=t\u0026pid=1533122608\u0026seq=1\u0026exp=103116026~103200004~104527906~104528500~104573694~104684208~104684211~105391253~115583767~115938466~115938468~116184927~116184929~116217636~116217638~116251938~116251940~116744866\u0026dl=www.farescd.com%2F\u0026tdp=G-1G95R5YDNV;182653668;0;0;0\u0026frm=0\u0026rtg=182653668\u0026slo=0\u0026hlo=1\u0026lst=3\u0026bt=0\u0026ct=3\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"14:1E:23:68:0E:D0:A1:C7:ED:6A:FE:20:1B:06:FE:F9:83:B2:99:F5","sha256":"61:AF:E1:FE:D1:A6:4C:C2:5B:60:60:94:B3:7F:5C:5D:34:BE:8E:AB:21:42:8A:97:07:E7:8A:B7:2C:91:5D:0D"}}},"request":{"raw":"GET /td?id=G-1G95R5YDNV\u0026v=3\u0026t=t\u0026pid=1533122608\u0026seq=1\u0026exp=103116026~103200004~104527906~104528500~104573694~104684208~104684211~105391253~115583767~115938466~115938468~116184927~116184929~116217636~116217638~116251938~116251940~116744866\u0026dl=www.farescd.com%2F\u0026tdp=G-1G95R5YDNV;182653668;0;0;0\u0026frm=0\u0026rtg=182653668\u0026slo=0\u0026hlo=1\u0026lst=3\u0026bt=0\u0026ct=3\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sat, 13 Dec 2025 14:03:15 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgtc:46:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgtc:46:0\r\nreport-to: {\"group\":\"ascnsrsgtc:46:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgtc:46:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/cache/fonts/1/google-fonts/css/7/1/2/100d7ca1f288026e789f41048195c.css","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/cache/fonts/1/google-fonts/css/7/1/2/100d7ca1f288026e789f41048195c.css HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 11 Dec 2025 18:52:16 GMT\r\netag: W/\"693b12e0-77c\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I6SXKRBbhVJB2Cccubc2Ik1S23kUGFTZW7xly%2Fug1ib3%2FEhuhsheNCM84%2FBeE4mRe4FjTVYa16F1CE1RLlX84aFhH3TiLI5Zt60OXBWh%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f5dbbc3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1916,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (649)","md5":"21cf86481d61e6c70dc0ee8023b14711","sha1":"c991a9a1b1493dfd2477980d643f927f4be6da19","sha256":"f8cc9520332f8de52fa78616cf2ae869c5737e6ea1c7cff158e30d9869f23c3b","sha512":"44b097466421de380087bf50fb3373c961868287aad828f197f0e06c34ced97cbec4331747c89c5f3bd35767a783f08d1757367324b1e68ec1f4a4cb1943b0df","ssdeep":"","tlshash":"bf41bbe00c1f5140bb675dc1628c6e23dd1ea258708989ac57fd278f9dabc66b29078d","first_seen":"2025-10-24T18:33:48.389041Z","last_seen":"2025-12-23T11:53:47.277293Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-menu/assets/public/css/public.css?ver=2.4.18","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-menu/assets/public/css/public.css?ver=2.4.18 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:39 GMT\r\netag: W/\"6938058f-163ce\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=THqKbPAneyU0Y72OFw5fZ1NYrECt2A%2B4c64td4X%2BYBvFBRAmls7CyblSu%2F9H98nbR1K5Q801%2FrEIfh%2BDN7s0Hc8gRayelmxySuxO4utIRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f61bd63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":91086,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"95a627cf45499e225dfde4bc875f05a9","sha1":"d396e67d45f2ed3220a06bb88ebb3c0f8ffbd952","sha256":"ebff34bfb2d90ca8d84f07477cab75ef20debef9e19adc7aba2dc7d1ef6d9a07","sha512":"c8da4ea562f3810044d79336502c0c48507c3b42f8d43257af33504190498f1ddc34f1653b0cf134ea0b87242f1fa2c02a265759489f96cbf4edb1adf7191347","ssdeep":"768:aP4QzBYuOVfuLYMaV7yw0rlUOYz8mBEgpovr4tT:WpY2Yz8m9T","tlshash":"9693cbc1c8d606ba0c4fe719d7ccd119cfe98b10eb9164e5a7f244198ec3e45b2e69ca","first_seen":"2025-10-08T15:10:36.261188Z","last_seen":"2026-04-03T21:25:07.89761Z","times_seen":774,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-tricks/assets/css/jet-tricks-frontend.css?ver=1.5.9","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-tricks/assets/css/jet-tricks-frontend.css?ver=1.5.9 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 06 Nov 2025 13:32:23 GMT\r\netag: W/\"690ca367-7fe6\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQWe4rXrTgP07Rg2zQ5uS1Rhz185%2FxuelmWDYrPC%2B9UmiKfGouGKuao0YKSGQEryqT0C9hHVHw6tIbnYKYEwl%2FrEgeUVlNVsis3wDZRhwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f68bfa3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":32742,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (32742), with no line terminators","md5":"6061f2ed9dc784cf71398a5560e90afd","sha1":"01ff683b45b9993ddadac6c8b94858832b68c491","sha256":"8faf5624fa3f16d043603e4133ceecb3e7c7bf51c3e3ed347b5e9d67bc78110b","sha512":"7f7b4a3348d1a9aff885a7e0cff8fffe7f0df5e4deb8e405929d10d49699ed06b63392c6451d6f7815e682abd802417c17d85bb55232348fed36209e1f6bf680","ssdeep":"384:61gR9n9J7VPC6bxIQEMEAHLvnZxrlqijp1BbH6UDpMrUFUC+FXchXehXiDXXXtXJ:Yylqijp1BbH6UDpewsC","tlshash":"b6e2349f99e2134940174e1787cc4e248a3dcab395555cefb2a2280fcb56b8c23df65b","first_seen":"2025-07-07T16:30:11.728197Z","last_seen":"2026-04-03T16:32:37.901902Z","times_seen":1168,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.min.js?ver=1.1.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.min.js?ver=1.1.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:36 GMT\r\netag: W/\"6938058c-4daf\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UwqbSGmSomr2seefsvAqgURY%2FfTInutNQAfqzFXf67fnUDT0GpIaEU9TAdtic58t5pg31a1n1jx5v5yrWnWvHSSBlaEVm3nu%2BCI%2BYBU3VA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f72c2f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19887,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19887), with no line terminators","md5":"d92d1d8e778aa3773e719bba09089942","sha1":"ff26dd2b05f2e5993490968d17801d91ad0f9761","sha256":"7586da6ec5a0e01eb5239aaac31dc3d411cae3090cce52a7e00efbda2f32c6bf","sha512":"a9e08b87563f8330e1128926473e953e507014f9dc60ce976c8fd44b7ccead956784286fe59ca1d24d0ddc5f5491281af55b0c065b5019e52944e7585eb7bb56","ssdeep":"384:b8TCK3oivAJhyEolRSQsRueeCC7EHaBo/ybDnLg0YE+BaFcXG3g4n:bGxd58EgHaBosLg4+wwO9n","tlshash":"6592e8a8f1a3b21383eb7568295f240c3bb2e912c90bc510765994a87dfce8d5127f7d","first_seen":"2023-03-07T01:17:48Z","last_seen":"2026-04-03T21:25:07.951647Z","times_seen":2373,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-engine/assets/js/frontend.js?ver=3.8.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-engine/assets/js/frontend.js?ver=3.8.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 04 Dec 2025 07:53:14 GMT\r\netag: W/\"69313dea-1268f\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AgdQwyUQ34j4L144%2B129oTql03kL10IfROkHV5BSACVowUvom5ipxih8%2BBsYbg3OYmW%2Fejhrp80fLzC%2BOPEqgE4TkX71KKzZDL%2BWv0VGeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7ac523181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75407,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"7f45b4f05639a6864e504e69ba6b1779","sha1":"e37b13fd873467e81088fff861a0c97c1a9563c1","sha256":"24c5baa82fbdaaf888577bbe88043498c0eb68a409fb0d162ff7fc0b82db9558","sha512":"8072491515cd59ab5201fd37c08888bf4de52be94efa754be3958be382e24022c1f354cfbacf2e5f7392a42287472191429367a4343cb3dbe61b5bcdbc9947ef","ssdeep":"768:qmv45emGIe3ipGgMFnbWRnqQd5dS7jmNtM+XY+zGyruO5MCyLSE:qmQ5emjQgMFnYBS7KNtMh+zGyruLSE","tlshash":"e473bad0f79d266b42ba3219e82e75cca13c4473a501987bbdd87644b1d085e63b8ff8","first_seen":"2025-12-03T22:40:01.294493Z","last_seen":"2026-04-03T07:47:40.303429Z","times_seen":252,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-tricks/assets/js/lib/tippy/tippy-bundle.js?ver=6.3.7","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-tricks/assets/js/lib/tippy/tippy-bundle.js?ver=6.3.7 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 06 Nov 2025 13:32:23 GMT\r\netag: W/\"690ca367-137a6\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xs6lB%2B7tQwYk9gACOmVzxbs0yvdL%2FfPS7gRWXR0TTXhHbSWdX%2FcpZN3uR7rV%2FK2LhD66xPIMxQTCYBxUKOlNXArfUVEm9tm0vlUY2Z2eyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7fc613181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":79782,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1426)","md5":"728d8d21a0c662b1929ca63a3dcdf4b0","sha1":"75d088cb428e7fc872641d754ccadc1d7d735426","sha256":"15689f5f9679beb5ea5463f67651178c1c51abff6de1433133df04ee9c08cadb","sha512":"a21c0992054f4523960f2b067edd35105afb525d57f44807c659538d7eb1ad496dcfae08fd4944bdc5ab8ba8f0b1853e8625a20cace65caf4e94f1edc3790949","ssdeep":"768:c2vkvZ04HwIKeZg0b89/wG+PC+NJtWLxE+kA1XMeCdKOvfUa6rnH4B3NPi6rU/9+:cmkvZl0YAJd8RwXhfZHEof+8vJS+ZY","tlshash":"c573820ab7f320655d2b71399b5fa51a323640571009de107c9e93d81fa2b3942ebfee","first_seen":"2023-12-29T21:38:47Z","last_seen":"2026-04-03T16:32:37.945304Z","times_seen":2041,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/themes/astra/assets/css/minified/main.min-rtl.css?ver=4.11.17","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min-rtl.css?ver=4.11.17 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:17:39 GMT\r\netag: W/\"69380553-b2c4\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mo%2B3pI4yZ%2BDLHSjQnPVjKWun66vEvvKeotvXNzBXpnPdaAMsjSx81c0Bi1JO9Ky5m%2BT9iQkXLFB60i02l%2BGE%2BL7ncbkYsahQGY8QHcN62Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f5ebc13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45764,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43582)","md5":"0116815c0dbbbf5ec9a6b4ddb98fc259","sha1":"1673dc3ce7b7f18824e645959316bf6f0cb39acf","sha256":"5751e57e837d83f3b4fe2b8bf416c015c02bb29464c6dbb176a19973f1ccf47d","sha512":"25c7512e0ea4a7515fb0b9e06b382b5c1d22b594b29a02ced2a3fe38b9bb6f2f99b5be6395664e177204fad6d7d88919aa4d450055dfac990b8de3105cedd102","ssdeep":"768:mu3grjWCGvvallnknFHk6aFcxdvbqpR2/WLtiMCFS7zHQtBU5PTTmhm2a7ZAR27D:XTPacOHQtBU5PTyDuSO","tlshash":"5023e96053d035395233473efad6be082a694313d70f66e6f8ab8668c9c57c71a72e4c","first_seen":"2025-09-20T19:55:29.330896Z","last_seen":"2026-03-31T21:15:18.678Z","times_seen":109,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-engine/assets/css/frontend.css?ver=3.8.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-engine/assets/css/frontend.css?ver=3.8.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 04 Dec 2025 07:53:14 GMT\r\netag: W/\"69313dea-10c65\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oifHD6ohLUqzlzNGdYFZr5HJlQOWi74iTtsF5kKND9CsiuSRYDLgdgPELUQKvdKvQL2tDhvy6QWodsooC9Vh41EhiWhb1g6VUiGQcocJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f5ebc23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":68709,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"58b18d6e753237919e0f243a355854f3","sha1":"04ff6ecb9098b385e9de4fe0d684f3bd2be57808","sha256":"ea06d3cfbab2b18cec0bab380f4fcf7783f427147a19c31a785c50bb211cb301","sha512":"b7567a78e590fcf6469af94f63f2654456303ff2e001b52d5782f47eca9df90b0daae7fbe0eb9fb32e3831c823694d36cfa51756e48b2862aa56ac9a7570bc9f","ssdeep":"192:Va3IkKBKQNSer12DnLxxV8pylly7HcXwyVT1IX4h4Ttdx/PLnqa1dqWVGDiMdTM4:wITBKfDjLx0GrrKLnZfqOVbW","tlshash":"2c639333925a3b2e905b8f19a788335dc65cc42295736be4edf09a518bcb69119f30cf","first_seen":"2025-11-26T16:37:50.787078Z","last_seen":"2026-04-03T21:52:21.726058Z","times_seen":500,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/underscore.min.js?ver=1.13.7","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-includes/js/underscore.min.js?ver=1.13.7 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:15 GMT\r\netag: W/\"682e087f-49d9\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d8obvV5ID1nHDOf0E3dzS7HMlPgwKdqYioY9t2U%2BudaubNOvLGHUUHQf6niT5EaXNXLDkBzB8m6pONkBaK2z6cOgzkKQkBk9hL4vujhopg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f70c1f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18905,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18870)","md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-04-03T22:32:40.117529Z","times_seen":89523,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.min.js?ver=1.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.min.js?ver=1.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:36 GMT\r\netag: W/\"6938058c-8cc\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HppwuZJyNut1QDBt%2FFH3G%2Fe1eyiNHRHPGHeCDOsA%2BV5SmJW8SIGfdoxRgMDVcewmkE0w4GWYMP6bNZPYbQ1jI%2FFgXIeGhAnwAEzFEer3AQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f71c2d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2252), with no line terminators","md5":"cdc4a1b7c4163deadf26c7c6ac356790","sha1":"bce49faf951431fee46e564190801594b21b6216","sha256":"0e3600ec4c2bc03d12652eaf6b439b731b697e66095d12f34ceaea5c5c7c9fc3","sha512":"de4fee70dde42615d5a6277e9b9537d67df2ea6283b85803657c9c096bb923ba47837e82118b91da5d3c805ab46b6ad6da12bac106dbcd2a8de5ed810a8f6b38","ssdeep":"","tlshash":"aa415cd6711166f632bf2b7b107eb006a5366d79e60b80607533e06d2539ae42703e9f","first_seen":"2025-12-10T22:53:36.722574Z","last_seen":"2026-04-03T21:25:07.982413Z","times_seen":377,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.34.0-dev1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-14f09\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPVbUM6WfMVNKNk%2FqlRuvWSfOtGsiXOj2Em4OMDjcV9z%2B6gLq8mMSXb9FBTi1AOjmEGKXWbkQxS7WkdEvvtvOIwyvsqVRPCynwq53d0jVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f78c4b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"1d697c830fda7e947b4efb6e83162396","sha1":"9d2b4e1102f12b9332138d3365a1d30cfc02fba8","sha256":"b9bc222aa72b968c5069428671e53c22206025bc9a71e184f9470253d5494bfa","sha512":"85bdc5561bbe652f4426f64e9007eaec9e66c4fc666f29c6eea02d9aed0646cbca92e2e732fa0f4500de0e3e90ce36c72bbd6a3ae858c17ebb1298907c5e87af","ssdeep":"1536:SWxmDu+HrrUl53yQ5RSSYeAjA6c9CSToZ2L483FiOvn9G4cR8+KAiA2gf6XSkCfR:Y2HE2HsAu","tlshash":"1983f8953192f8b607fb40db903b4006f26619b8b40da094bbfddce19875d8a133bb39","first_seen":"2025-12-12T23:30:14.93736Z","last_seen":"2026-04-03T20:47:57.060158Z","times_seen":16033,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-tricks/assets/js/lib/ts-particles/1.18.11/tsparticles.min.js?ver=1.18.11","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-tricks/assets/js/lib/ts-particles/1.18.11/tsparticles.min.js?ver=1.18.11 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 06 Nov 2025 13:32:23 GMT\r\netag: W/\"690ca367-22556\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2FyubQWSNPBBzYtpxGGFnC2R4MHqUUNTafJ9dXzXB%2FMuG4oSLXlKm5%2BhdvKoMmP2jS4Sgzhxk7lrAAOuGVuttyAnoXYudLW4%2F%2BFLLG4bXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7ac533181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":140630,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65491)","md5":"fdd6f7d0e809e719153d1d5b93708211","sha1":"f3c2da9ceb3735bf1a134de6fa596504b71dafa5","sha256":"5ede7abd188b3bb0828cfc91bb3b54d0d3eb630c78205214687a5dc566c538a6","sha512":"4ab612001764d357675e2133d98385be98169ffbde3e54306ebfce77eaeceb1f3f8637cb7d1e987d9b94faa5b841a4189e5f262f56b80e08cc31d8974a13738e","ssdeep":"1536:fsx5VnMj1uoih2wu6NMFyc+5AKv1PxRFKhuEPhDaekhnRz002UIpph5wPgZgK+:fOdMj1uoiAw9NMFsZfGxwS+","tlshash":"54d3c68273a2b8315ad3e2e850b60523a33274953507c4bcb93ed9d7ed5e6c62177e38","first_seen":"2023-05-22T01:44:41Z","last_seen":"2026-04-03T21:18:52.568504Z","times_seen":824,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-tabs/assets/js/jet-tabs-frontend.min.js?ver=2.2.12","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-tabs/assets/js/jet-tabs-frontend.min.js?ver=2.2.12 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 11 Nov 2025 18:01:49 GMT\r\netag: W/\"69137a0d-60c9\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIj%2FsNv30CcoqM1zZO646qdUJd9hA1CZ6U8XcKfEPfZBo2wW9mK1GbHYciX%2FhHhkt3XuS7ZtD2EGQ784Xzjs7pYtj2DtbGccY7dWvBGkzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7ec5e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":24777,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24777), with no line terminators","md5":"90db23911876f1aac969b773d594a109","sha1":"2717d3b7a7bf4df5a75ac6713e4425b34802f63f","sha256":"6f0e1c4a6f08fc604bf93105c5d247835f3e9db5841e6fe9953e43ad4bd28a47","sha512":"f5309692eb5c320d7abfb8f6bff9a5653e319758794344428ed61a9dc4b285a0721acc3d9ba0e99e77dfb1ed5e80480d1faf87e62331777fca9487d74f3a3b00","ssdeep":"384:6yNuCegBUV5dzJ/9Vi6dVIJjNiOVf3lyquyCkJGI9wDE:6yr8dz2hYkP9wDE","tlshash":"edb2d8247226347352bb757aa21fe20da1311875950e51a07002c8f97ef8f9937a7faf","first_seen":"2025-11-13T12:24:37.187043Z","last_seen":"2026-04-02T22:07:13.636034Z","times_seen":343,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/jet-tricks/assets/js/lib/tippy/popperjs.js?ver=2.11.8","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/jet-tricks/assets/js/lib/tippy/popperjs.js?ver=2.11.8 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 06 Nov 2025 13:32:23 GMT\r\netag: W/\"690ca367-4e9a\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eGJ5%2Fe1ylGev9OEusWg7Ks6Mx1CGqAgu1lIRljiJGlUC5JGvYeBvf5rEc39NPzyFcqkJ8TKWdvwXSwhub4iLKV51L9eqA6ZtMVkWfpaC1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f7fc603181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":20122,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20033)","md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-04-03T21:23:58.028541Z","times_seen":8826,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/cache/background-css/1/www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.min.css?ver=1.14.4\u0026wpr_t=1765640658","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/cache/background-css/1/www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.min.css?ver=1.14.4\u0026wpr_t=1765640658 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 11 Dec 2025 18:52:16 GMT\r\netag: W/\"693b12e0-43925\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mucSmDTvh3FpaPwfx4NsosAEg21w3GHIzDtcPAM9IO8RyzlgxRgQsl7Z6UZGHbdQEr29t4WXvrgRsHeoWX0wFuNsHYm5h8zEibJuWKP5Iw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f5fbc43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":276773,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"27cf524d64cad2ec476ad180185c3b71","sha1":"52e6eb746442ec2c6bd9fc53bba3120d21d4526d","sha256":"ba6f5522fb34abf5e3d8a660ea170f0b9237cbc1739d1e73710c076ddf64c7b0","sha512":"cd214e8b8ae5f4cb31aa6f94696b3bf6145a04be9a978c9b40dbf0bfb574a4d0ebb86cb3fc061996cf61d7ca0f7eefc5994be403ec42cb7c45c03bb58d2d4c3f","ssdeep":"3072:dYRc071fHfhbK6j53cIZrxztnzF3YeXorlbF1:dYRc071fHfhbK6j53cIZrxztnzFChbF1","tlshash":"e844f6222621642c626ff23da8d973582134c953eb630eddf951b32ea7df385036664f","first_seen":"2025-12-13T14:03:51.776162Z","last_seen":"2025-12-13T14:03:51.776162Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 21 May 2025 17:08:15 GMT\r\netag: W/\"682e087f-53d8\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dUaSUc%2Fqm2lRgwGxFJDl6UiYT5%2FFADtQ%2FxAAaeD2eOhhHBllP%2BwyVTux9lnNabTXG4IAACvRfauB61IjYJYwo8Yv%2FOXv2VkEmXlEViSNBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f79c4c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-03T22:31:34.456417Z","times_seen":217413,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-json/iawp/search","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:15.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"POST /wp-json/iawp/search HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 132\r\nOrigin: https://www.farescd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":132,"data":"{\"referrer_url\":null,\"payload\":{\"resource\":\"singular\",\"singular_id\":100408,\"page\":1},\"signature\":\"539af26d6933ac9d819a4e51431ca5bb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:16 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nx-powered-by: PHP/8.1.33, PleskLin\r\nx-robots-tag: noindex\r\nlink: \u003chttps://www.farescd.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link, Jet-Query-Total, Jet-Query-Pages\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nx-iawp: iawp\r\nallow: POST\r\naccess-control-allow-origin: https://www.farescd.com\r\naccess-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-credentials: true\r\nvary: Origin, accept-encoding\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fOntRgIV8QKRCRad0StppBqv9GpEyvwtYJfOOeqDOuBhNi8LunT39c%2Fr5RZ6%2Bq05k8hkyYMuoH0KTVdTIwfOVuNVOdxJMA7GzY6VB3hR7g%3D%3D\"}]}\r\ncf-ray: 9ad600fd6d143181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T22:30:12.170577Z","times_seen":114972,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fundingchoicesmessages.google.com/el/AGSKWxVY_9sSGwF0tuJWsigX0g1G5Kyhmze6j20pZBWDoNPOVHQ_RXl5wfYZ4vpPuJ8tMjva4BTFPAMIza-jVXVTMqs85thvIZ7fq4VB_747E8JCOpzzihTk_yVZUSbrhvpLdiCwGybtsg==","fqdn":"fundingchoicesmessages.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:16.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"98:61:A1:01:94:12:1C:03:5E:13:41:74:51:6D:2D:18:E9:F2:69:05","sha256":"4E:24:16:A8:D6:22:3F:BE:06:74:9D:F4:9B:CB:DF:31:D8:E5:8A:F9:E7:B3:7F:8D:5E:50:F2:25:34:EA:7A:94"}}},"request":{"raw":"POST /el/AGSKWxVY_9sSGwF0tuJWsigX0g1G5Kyhmze6j20pZBWDoNPOVHQ_RXl5wfYZ4vpPuJ8tMjva4BTFPAMIza-jVXVTMqs85thvIZ7fq4VB_747E8JCOpzzihTk_yVZUSbrhvpLdiCwGybtsg== HTTP/1.1\r\nHost: fundingchoicesmessages.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 154\r\nOrigin: https://www.farescd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":154,"data":"[null,null,null,null,null,null,null,null,1765634595740,null,null,null,null,null,null,null,null,null,null,null,[[1,156,\"www.farescd.com\",\"farescd.com\",1]]]"}},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: https://www.farescd.com\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 13 Dec 2025 14:03:16 GMT\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'nonce-0ZrC3nLj4MyZd2OlCuNFRw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: same-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreporting-endpoints: default=\"/_/ContributorLoggingHttp/web-reports?context=eJzjCtDikmJw15Bi-FB_mfUHEJv53Wa1A-Jqdy-2ZiC29fdhcwXivTl-bEeBOLPTj60QiHU2-7GZAPH5vX5s14F49U0_ts1ALMTNseTJ15NsAi9OvDRXcknKL4xPzs8rSc0r0U1MKdYFsYsyk0pL8otQ2KllIBU5-enpmXnp8UYGRqaGRoaGegbm8QUGAONIO3g\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js?ver=1.0 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:18:36 GMT\r\netag: W/\"6938058c-fc4\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5IROJUkoSMYTX5L12u0%2FzhnSd5Ak%2FGdkxGJrDEilPfM2gJwidN0QyaoVT%2F3F%2FvwbAybaZ5EXkurkH%2BgumyrorOREvES3CDu%2BnqJXtaQBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f6cc0c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":4036,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"2344c2369f3ae37fb5f28616b645dadc","sha1":"587fd3bbaadc6d023d1cf74c15073553765825d0","sha256":"9e28ccc0255eec86d4de746e8dfe9e7fa9bb5c0fae93fa0ee39670bd7734d974","sha512":"40d9ba9df5e81317d30cd0cea27dcc90ec42a3b181e1dd45dd7f9a5e8420f983425b6c090eb1f2cdfc37da341d42e208b3d957e7eeb8dfefd7628815058f46d1","ssdeep":"","tlshash":"a581b00924f7273022c798b57f8f90512852d52389d9c92cff0d26891fe81af2793bad","first_seen":"2024-03-27T00:13:04Z","last_seen":"2026-04-03T21:25:07.911164Z","times_seen":1825,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/11/13-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D9%84%D8%AA%D8%B3%D9%88%D9%8A%D9%82-%D8%B9%D9%84%D9%89-%D8%A7%D9%84%D8%B3%D9%88%D8%B4%D9%8A%D8%A7%D9%84-%D9%85%D9%8A%D8%AF%D9%8A%D8%A7-1024x1024.png.avif","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/13-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D9%84%D8%AA%D8%B3%D9%88%D9%8A%D9%82-%D8%B9%D9%84%D9%89-%D8%A7%D9%84%D8%B3%D9%88%D8%B4%D9%8A%D8%A7%D9%84-%D9%85%D9%8A%D8%AF%D9%8A%D8%A7-1024x1024.png.avif HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 124084\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Oct 2025 06:53:29 GMT\r\netag: \"69006869-1e4b4\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kHB9vWATH6iLzr%2BYw0ed9AyktdX7tvjRapNuH%2B%2FHhFK6EfZKFPPWAnPnJ855xHvZmzH7FlOY4b9GvL747CT588k%2BbCgIViL6jP9KeB36rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad600f6dc173181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":124084,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"db6d2e1f6021b40c55f42a411f526d05","sha1":"14cd3ac4a4e7655663089442062a10a02a97646c","sha256":"db6c3364e366dfdf8daaf5398f65bcf128e37b5a60c31f9f0044d1e5d1f2fdbb","sha512":"a088b372afe1b600636bf35cd1a2d758bb37a9ffebda1e8d263f5f08ce08a77d4f9045053e2681c6254fc4ee5c6061409294ee2f72d7c6c81f5d380b99156b2e","ssdeep":"3072:c+o3gP4lOoojcXjEU5bUVztPCB7Sin8xPMB2:c+IlONjcXj7hkzt28z","tlshash":"f2c312a4e6de129ced55c73300e8d1242b5d8ce8504afcc75adc2f2b65e63ad4702e7a","first_seen":"2025-12-13T14:03:51.778912Z","last_seen":"2025-12-13T14:03:51.778912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.34.0-dev1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-156e\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qk2G3J4HawmWuK1994ZGgQwvFR%2B1%2FyPYIJ5MHZpX6ldqFwafqQJo6fKVDj8ucsFJbDzlBTGieiE27KVGw1hco3mCUdgqhgrWvKReOEXsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f6ec1b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5486,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5486), with no line terminators","md5":"f8ab0c98754e13666d2cd378bd023dbb","sha1":"a5226ce1f5dd1eaba7a6d2490eb081bfcc861a0c","sha256":"196f351ce1a780302b50e7b2404023102d7f555aa518d62ec678829c4b7b1185","sha512":"4d78e7fa90bccdf3ac5c09bae6cf94f7f249df6dabb23a510962d1b96072de072a6f81ada0e70f9087a6c38d909aaa42fb5350f7c8d1fa7f90be7578fb2698be","ssdeep":"48:VbD0j9UWW1KebuS9OwVFd4Rd8JN6JnDYQ1I1kFYFsFaFbdFvFblFaFbpFvFbX:Vf0RH1f0qYm6qg3B703VN","tlshash":"adb18c823f830123635f4e67292357bda2280dc44997b6aad2e1ac87e2b5cf5375f854","first_seen":"2024-12-17T09:11:11.376513Z","last_seen":"2026-04-03T22:31:34.368605Z","times_seen":53741,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/astra-addon/astra-addon-690ca36ff2bf18-64255863.js?ver=4.11.11","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/astra-addon/astra-addon-690ca36ff2bf18-64255863.js?ver=4.11.11 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 06 Nov 2025 13:32:31 GMT\r\netag: W/\"690ca36f-2bc1\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBTeMWY7csWLoKzW7pGQS6WR3oG1nQadAm6VXn2aOmwA4LMEWagFSnRy%2B09o4UIW0Gs80r1Y1BdFekMbd3ULHGwB63pncGPPpwDLc46S5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f73c333181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":11201,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11201), with no line terminators","md5":"4ed787a6c2405c65ec11bdcf4b1254ee","sha1":"a422d3cddf24a0e43ea6b64d06371cf7204ad816","sha256":"968181dee033601b0cad6f2c58046d55b314e2013f8fe61ad8cd593793e04d8f","sha512":"76ad544b6cffb9530b393a3c0587f14104d09c972c132f5ac00dd2a81d2dbbeac38a3469d8bf0e1b1bdf2a4417fe5ea05b00de1bfb3281e97e6dae7c8615ba02","ssdeep":"192:taJI2Ic4uAurl8pyE5Iy3yCrtMLlzZpD7G77psPVkr9LLE3XxSkWkDx5WijTEDxe:taJI2Ic4uAuripyE5V3yCrtslzXD7G7g","tlshash":"4632a5b52318713700bb1babf4ab5bc8b6b115afe94d0401756ecc1e58e8f8350a1eb9","first_seen":"2025-09-19T04:50:12.757399Z","last_seen":"2026-04-03T07:15:10.206022Z","times_seen":430,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/uploads/2023/11/09-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D9%84%D8%AA%D8%B5%D9%85%D9%8A%D9%85-%D9%88%D8%A7%D9%84%D8%AC%D8%B1%D8%A7%D9%81%D9%8A%D9%83-1024x1024.png.avif","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:21.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/09-%D8%A8%D8%A7%D9%82%D8%A9-%D9%83%D9%88%D8%B1%D8%B3%D8%A7%D8%AA-%D8%A7%D9%84%D8%AA%D8%B5%D9%85%D9%8A%D9%85-%D9%88%D8%A7%D9%84%D8%AC%D8%B1%D8%A7%D9%81%D9%8A%D9%83-1024x1024.png.avif HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%224fad347d-d169-44eb-822c-a52188089546%5C%22%2C%5B1765634595%2C738000000%5D%5D%22%5D%5D%5D; _ga_1G95R5YDNV=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0; _ga=GA1.1.358228018.1765634596; _ga_HVTEJNCQN9=GS2.1.s1765634595$o1$g0$t1765634595$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 127523\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Oct 2025 06:55:56 GMT\r\netag: \"690068fc-1f223\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c8J0%2FVAdyMAuGHEAmaG%2BP198LijevH%2BG6M4QafrkuBIg8ED2GO2AJU%2BUezqY%2BSoX%2B1WnSKBGxnlCBiaTHiC%2B8u4RXnG0IodGK50zsaz3vQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ad60124e9f23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127523,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"4befa9e766d1d120684b44638b9fb98c","sha1":"e90c9701d858fad2e95b0db14cb2e6d710f5b581","sha256":"77a2bbcca5400a8a6b2f940eed4774fedf3dedd30b6375d76cdc2f268aec1f2c","sha512":"e82dcc49d04b70dee808d496a8ac281c9585510e038f8c0fde0ff1e7d7f71a0f276eab3fb5a7ddc1bb3404073a9211273b65e17c345f41191680f81cd72c248d","ssdeep":"3072:Z7+eLHs3yiX/0iZnJYDTDzrQ2pBmjQ/UAH6mMoS:p+VdncXzzpBBX65","tlshash":"91c312e836ea8c5ff5ae4c762638030135b96c4e6e76c7805eb4bc7090f65dd6f86a04","first_seen":"2025-12-13T14:03:51.780797Z","last_seen":"2025-12-13T14:03:51.780797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.farescd.com/wp-content/plugins/elementor/assets/css/widget-icon-list-rtl.min.css?ver=3.34.0-dev1","fqdn":"www.farescd.com","domain":"farescd.com","tld":"com"},"ip":{"addr":"172.67.134.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.farescd.com/","date":"2025-12-13T14:03:14.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farescd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 10:41:44 GMT","end":"Fri, 13 Mar 2026 11:39:21 GMT"},"fingerprint":{"sha1":"F4:96:C3:DE:D4:CF:7B:FF:32:88:BB:AE:B3:C0:A0:56:55:16:EF:20","sha256":"EA:98:32:78:9C:B6:45:53:A7:89:F9:65:41:3C:72:8A:5D:80:F7:C2:C9:4A:09:5C:7B:30:68:50:B1:05:F9:52"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list-rtl.min.css?ver=3.34.0-dev1 HTTP/1.1\r\nHost: www.farescd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.farescd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 14:03:14 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 09 Dec 2025 11:19:51 GMT\r\netag: W/\"693805d7-280f\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XUQg6w%2BWHiN51ASga7U8QNkQIsOIAs48Vodornpib3UFZyh9Un%2B71KDVOr4m%2FR91fH2UtWnlPUyDz2TWwYnT1caS4PxH38K1qGboOnfgKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad600f63be03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10255,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10255), with no line terminators","md5":"1c6df716953f870be76c3e88a69a326f","sha1":"55001bbb898eb7636eabd0418275a9f5aa96ac51","sha256":"1b34d4c7324321e36db5d35f05bb011238a1326f89058a4399d028d1f6c47dd5","sha512":"d2cb3f58b7f5b83fac1744e81367e6ef4e350a073aee634b85a2ad87b4676cb78561db329bb4c9da20617a1be770b0d399ca731d0dc6792fd1f37e2ca116432d","ssdeep":"192:eKTrGZCLG+tlR3080ur1R6gxrcazf7fneLG6AHRJSJ/JwJp+XuknI0:eyv0","tlshash":"a52283917d83814e1aff651b141b2a4ca1c9c4dee8b6ecd6e866130782ffec53772528","first_seen":"2025-12-13T14:03:51.781572Z","last_seen":"2026-04-03T22:30:18.622778Z","times_seen":17299,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.farescd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}