{"report_id":"65e5a9ca-35cd-4c09-a836-a7a94708026e","version":0,"status":"done","tags":[],"date":"2026-09-24T10:04:53Z","url":{"schema":"http","addr":"studioswit.live/","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"studioswit.live/","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"title":"Studio fotograficzne i filmowe Warszawa – Studio Świt – Stawki Świt – studio fotograficzne i filmowe z cykloramą, oświetleniem Broncolor i pięknym światłem dziennym w Warszawie, ul. Dzika 4.","dom":{"size":119450,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51174)","md5":"f85acd0b81ed8f149dbe6a9e47503bd6","sha1":"585f34053c50c3621536a87ad70205c790e8a52e","sha256":"98d3e66df14e8d35b120411d7225c638e6590a096ef53068db5df29592167ce3","sha512":"5fe7415e4f93958ad39cb09116f863ce050c01e290e699d09735c22cb3e5f71bfd77d89847e0899128b5e04289eae20431938b43b874249e3e3df8698fe2d139","ssdeep":"3072:yQeTp/WUWOkPOi+76Xa5ktyyupPeypXvR/rypFa0uPUYHJum6zyw8oNJfZXODCDl:E176Xa5ktyvpPeypXvR/rypFa0uPUYHA","tlshash":"19c3e932e5017416113384d6f2b3af7cb6f1a215c38689a4b9fc817e8bc5b955e722ce","dom_hash":"domhash468f3c270be5516908657f2ca3b48def","first_seen":"2026-09-24T10:05:31.265432Z","last_seen":"2026-09-24T10:05:31.265432Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"studioswit.live/","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-29T10:04:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-09-21T00:02:17.3583Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":808,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":4588,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"studioswit.live","ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":320,"request_count":64,"received_data":7246089,"sent_data":33337,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Slider Revolution:5.4.6.3","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"BeTheme:20.7.2.1","description":"BeTheme is a collection of WordPress themes developed by Muffin Group.","website":"https://www.betheme.com","common_platform_enumeration":"","icon":"BeTheme.svg","categories":["WordPress themes"]},{"name":"Contact Form 7:4.9.1","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]},{"name":"jQuery Migrate:1.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:4.9.13","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":5,"received_data":86255,"sent_data":2749,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maps.googleapis.com","ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3442,"first_seen":"2012-05-22T14:23:23Z","last_seen":"2026-09-21T08:48:29.132036Z","alert_count":0,"request_count":4,"received_data":1516454,"sent_data":2005,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-20T22:44:48.5379Z","alert_count":0,"request_count":4,"received_data":1755112,"sent_data":1948,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ce4e157448487d4efe0ca538f656a71","sha1":"45d22de723a97ca19cddd4fb792e339b5fab5c50","sha256":"936567bc744e199e02bfc3c33fe2bc9c862999e0d479e2a694aa7485460a3960","sha512":"a28ea8c489ee99b0127217429933b84a07cd0b53e4a566754d7bb3e6c762bf7909052cee4de5ef3fcd1f8263ca88c2821a7590cd7cb3a1bdb54599c79c6ab5ae","ssdeep":"","tlshash":"c18163ecf1837420c3eb3b75507f594bb2bba896194d0468b09884d46db2e19907bf7d","size":4000,"data":"","first_seen":"2023-03-07T01:31:36Z","last_seen":"2026-09-24T10:05:31.293662Z","times_seen":1992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/66/6c/map.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"923cfaeffa8d1b1c80b2ef90b82fa606","sha1":"b5f8ba1ae8e9e2f2ec18b64ae2707efc8ddf38b2","sha256":"7dcebb63a808976d2b1b5d27c8acc987cb8c4c66fbe9693fec825da3ed46e10b","sha512":"e61d2d51b25cf69826e849881856b76ff05eed921a0100652006dfa724a8d827d4ebbe792f43ecb4d1aeb2f89e883bb7130a77ccdb9a3cbe1fa24ec87439b138","ssdeep":"1536:S4F6q1+U8mRcPT6M4YQLWOQSXElljcJyUZ4X4d5TawU1Wmx:S4F6qXsT6FYOySXElljcJyUiXo5Tav","tlshash":"778318a1322275f69bf5d4b4905b0203b065e445f00989bebd6cddda5aecc8b12feb31","size":81283,"data":"","first_seen":"2026-09-22T20:11:27.322499Z","last_seen":"2026-09-24T11:51:18.685818Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/66/6c/marker.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6878e17bef92d048bfbbd7b9f37ab329","sha1":"bbe5d9c040249511b1750f972782f6f459aa864e","sha256":"fd1f32a9afaa962437ae5b2e9b8bcf3efc6385fd6726431704e7bee5e1f41f86","sha512":"19f9d76988c163d3d829c3aaa378c530125a81fd84361590693b25d06fe1007bb064e2800222e6be13621ee3f2d8c0bd8640958da131043e60fd54596c4d265b","ssdeep":"1536:khB8Q8xQl7Whc31ZNhPgTUVR1xAKt6R3t4jRvoMP59j0:nqiw1ZNhPgg2R3t4dv59j0","tlshash":"fe631ab5332135b79ff9e1e8509b0103a6b4908a9105c52e3d6dddd61ef8d8b22fab70","size":68040,"data":"","first_seen":"2026-09-22T20:36:59.975326Z","last_seen":"2026-09-24T10:05:31.325107Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aaf7e95e34f292b1a098887db6cf9ee3","sha1":"e00d5e9a3dca546921b83d15a0cb7a9261467027","sha256":"149d1060d155832cca22142423c095866d6b03277f372ebc1967ecdf579a435b","sha512":"824a519d23ccf5819ec06039fb8ab8b9a43679052bfd7d644b7c5c596b7a9ed5f51e1fbc82b2558db2c3314a2a4982c8f54154ea1bd0338bed5675a7dda76d16","ssdeep":"192:BcLK1q1e1XfU9dciEK5FKw0Vm7Wgput9mHJnGN82PbZ7:n1q1e1Xf4+KL6m7WgpAmHUNVPbZ7","tlshash":"7432d95a6e2028f640f3132cf9ad45d273228572e5068d41f9e6f9b9566ce9c037abcc","size":10931,"data":"","first_seen":"2023-03-07T01:03:16Z","last_seen":"2026-09-24T10:05:31.312953Z","times_seen":1262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7121994eec5320fbe6586463bf9651c2","sha1":"90532aff6d4121954254cdf04994d834f7ec169b","sha256":"48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d","sha512":"b74a2f03c64e883b9a34de43690429327dfb4aa230a7a6afca8150a16e3d84e98461245ff264c26368d9904562cc34fe219f71f951d364fa5c68c039b76776cd","ssdeep":"192:kZrk/GNyd31svs7wkX8KzJcqSDdAcHX4YE5NLR:srhNyNO0kkMKzFSDdAcIYwLR","tlshash":"2e22c79db29a70625fba35f8617fc11b717a94fc2118d9e4a08c8ed1387dc9d403ab39","size":10056,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-09-24T12:16:49.50302Z","times_seen":61251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/LayerSlider/static/layerslider/js/layerslider.transitions.js?ver=6.6.2","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab5c641341135bae9cde257a14da0656","sha1":"386804e789461da7b84d5e6e180ae87e67276dc8","sha256":"7f612443943aaf092378e9fa4082d03bb33e0a4430b19f51fe16077e66729db3","sha512":"b3da4d1dfaee046ed348fe4120dbce4acac412eac5af1234036adcc2d5b6181bb53b805ecba5e8b9b93a43354773542fc1aeb449b81208de8fdad6ae589f6e92","ssdeep":"192:bQcANIXhA3snO6Zhpvi9JarYd5f/GEUVrasa7EoJglLs89CPjkoY6JtiKWh4SPcD:7sO8l92LMXUcFsp53AoXJu","tlshash":"96b28b5f0658ca7b5235d0baf650474f3a57a811b1be04ed227cfa9b324163a8fe1ed0","size":23831,"data":"","first_seen":"2023-03-07T01:07:48Z","last_seen":"2026-09-24T10:05:31.299589Z","times_seen":984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82835a8960ddd73020389dbfa45c39a0","sha1":"a54b01fc7de31d8068f61177d840125bb9ce011e","sha256":"88b0379349a4dda6ebcc43c5bd12084d230c6105a6fd3c2f651c4e771b3eabef","sha512":"c69039ea3a9c653fe627b5293a4f68d8e84ec374c9bf68629cc1195c7ffcd84dcd5e446823df850bf0fb0f9a4255b2a4ba942999b950142513bcadbc17e803f1","ssdeep":"","tlshash":"b75197c932646d8341931736d27bdb477d3190d9a44ad52cbb38acec3a2c43860b6abc","size":3148,"data":"","first_seen":"2023-03-07T12:04:29Z","last_seen":"2026-09-24T10:05:31.291452Z","times_seen":637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/ui/accordion.min.js?ver=1.11.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"334c2ffb0b086ffc0f6f192ea120f3c2","sha1":"1a1b1840fa91c9692a546a9074709f74b1d032ba","sha256":"bbde0ea9c50274448afdee811988867d3579169daff16b64bcb99ad1ee10905f","sha512":"6360a49365d8d0af829fb837c54921ca60317e5b7e75a967adcfdb6433611fd1ff5ffbda15f889074fd0b1fcb62b31822cf9ea3c4ae7fb28aed10d7eced08429","ssdeep":"192:gOWgDgjF7zG3xZye3orMFKYVeZN+l70Qd:gOWgDgVSoYxxl70E","tlshash":"b4029614324439f1789b91a4592b5e4ea03274d8d4054c8c733999cf9be9d84737bb7f","size":8584,"data":"","first_seen":"2023-03-07T12:04:29Z","last_seen":"2026-09-24T10:05:31.319402Z","times_seen":365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/wp-emoji-release.min.js?ver=4.9.13","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15d0c302dc74fd87bd9cfeab513e13e4","sha1":"d25b738415c1594c4f840904bb876055d96cf256","sha256":"d2458b9fd9089fdcb9de317093e004ef3a65597dc68b9adfdeb15a7c9968d0d5","sha512":"cd6489b36e49844a85eb0b2e168f05f3c5bebb622395786b9324b32d85b10a4b4fd9afbe786b2deba6ecef0efe1cd51f2c00d72e75578cf3fd5d59283e6e9094","ssdeep":"192:3IdCwIdZKx/4W+TJr3J//bEvAbWXXR6AooHyrOUlSY06KdpNfojt3gzQ5aY:35zw4W+TJr3J//bEI+XgA5UedpqtgM5N","tlshash":"d442208f733a5f9fb43e26d78e96cf0e95d949932580f074daedf68229d005983b4840","size":12026,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-09-24T10:05:31.322431Z","times_seen":1487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/LayerSlider/static/layerslider/js/greensock.js?ver=1.19.0","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"150324e55a09a90e1eface0a7faed270","sha1":"0fe9f52c3c351c06f5cdb80f86d1aa70a52c4140","sha256":"dfc519eb2d0e5ac0e8cdbe86fef355135280c643df14fa9a8e6abd5820d01159","sha512":"1efd29ad79905eca538e23b39d38f8da043f7d7b050e395f146e841a92551c940a3e9f09388fec0f59fb06108f444a62b17540604c66090c63d6c0e003cf1b26","ssdeep":"1536:S56fJZjIbDJjzglHP0VH4dLk2IrVpcXIKXkPxbnNku87CWWCut+7u5zOYIn8UGBa:SBZkFjGXgojNICWWCuq1nyhW","tlshash":"1db3f8c63222601244972196597f0a477337d8eaf4498e2cf588c9de3e1dd8922bff76","size":117557,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-09-24T11:03:14.543607Z","times_seen":3034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.6.3","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a748a9e56b2c639013c770506f1fd529","sha1":"537edd9b364ac005df2d1c57be873945b2fecdf6","sha256":"6eabb193731278713f4208ea84b8c7334c3dfc98f01cb074778280e1df536e62","sha512":"ade8062894443994d5dc96497426dde1e238adfb9600aab7b3713ce804934aca5e12ae3267d961268ac8a146bd06754aa110006964af95e9394dfb1ea5b825b8","ssdeep":"1536:iQpnayKBPfF5aknBDU0KsIu5XOKvITONqvUejr3P99cN7H98rYx5s14/gCsBMXw7:iJfFYoDU0xVqvUejbs7dCYdInBwD0a+","tlshash":"96b329ca35517022859622a5517f0643723bdcbab4098d3cf548d9ed3e2cc8921bffba","size":110563,"data":"","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-09-24T10:05:31.286373Z","times_seen":5369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.6.3","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea632fb18aac2217265de8d583284476","sha1":"ea93c8af55049ccc41a02878b9c40303b317423f","sha256":"5c66c3c106dc8c518f76ddf6921166fbbbd755b7c5586adc4f9171db0a7eb3df","sha512":"570be4330067be35a7dab9a371a2d53372a8b75b11cd2db2557a53d96ea0e35c833d2675dc8198a5998396c98316aa4c28dc504caeeefd41511f808209b0daa1","ssdeep":"1536:cCnzw4t1e4eYpkDE6+3YZdpEaUH/qj6rSPKi1OdU+jIX7D6QIA7H8u5TXpLp:cCnzXnnkDRPK4X7uQpHHpLp","tlshash":"ca53e864be10647644fb7265e03e8514b2b16d3aa703c090f2a7a87c6aecd85235ffdc","size":64792,"data":"","first_seen":"2023-03-07T01:03:16Z","last_seen":"2026-09-24T10:05:31.290948Z","times_seen":620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/js/parallax/translate3d.js?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af31b2d759ddae795f623b8ff403c3ef","sha1":"a45db8f433ad5d481258e452d75e444f02a0473d","sha256":"473fbe193000b252278e08104106331b16cd71d1d671d52062d98b283a95b94e","sha512":"d1deab9520e64b246a44eace6ba9472b69b3386daab5998a15f31f0de579eb66cf1dd213b83d12f7973b06869c72bb39273d014412f6ac10b960b44b619315af","ssdeep":"96:em/il+Qzu6uyEKxqCWE1X3G0Nbq4KNqBeOHPhM1W:e6gzzuly/xqCWeW4sqeW","tlshash":"1ad1ac186eab202454a3f67e87ffa544f1a681273508dc457a0d52583fa870d4eadbb8","size":6704,"data":"","first_seen":"2023-03-07T12:23:42Z","last_seen":"2026-09-24T11:03:14.490544Z","times_seen":1166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-110803882-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee37f7166bff7ccac3cabe74b84ce239","sha1":"a2f00399a2d6164298ff07012bd44c75e1d4119b","sha256":"bc40a2a6cfdf3c2d51453cff6d023a49f9bb57832790a6eaf762013ff7741184","sha512":"415e74c310784eca1af22c40374b86ba6bfa608ed6cf496f4b16602b429546e27e28bc6511782dbe019f3a47614ee197d272d3e36c4449ef90f173c332e27076","ssdeep":"6144:ap1mivFwkl6ZRqsdcc1abxE/B3pd5ovLWrSH9G5m:5B46JoSrEJ","tlshash":"4c8419ccb3d6702283a3b574903f018bb27a6d92b84cc898f286d9d42e7465a5177f7c","size":382112,"data":"","first_seen":"2026-09-24T10:05:31.311391Z","last_seen":"2026-09-24T10:05:31.311391Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8cc105dfeffdc03367dcbe7ea3ef264a","sha1":"9aa2e656e163d9a3ea622b4897974884583e4cac","sha256":"80a9123891e91ebbb1c06a2d2c79533155a8f17c51ac09013efa57bc007f303a","sha512":"bd11bf18cac33ab7a76618c84aedbaf123d050b4f9bbeedf5ba560e81b514a7e169f95d89afeebe3a28227ed453ae0f8afd43d774be2d3e59b88c31b27cfe08a","ssdeep":"384:Ky1KpMxWR1zy40Islk/4EfoXdOM8w706DvCQ41b0zouFwhq1Tdo+2sb3AB8kNv1A:KsIslkQEfoXdOM8w7HvfzoiHRBm4","tlshash":"a8d2ebebaa265c6290532142c3a54d192168ce36fd32aeda33d6d0f506c305d37fafd6","size":29401,"data":"","first_seen":"2023-03-07T01:03:16Z","last_seen":"2026-09-24T10:05:31.285737Z","times_seen":1742,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8ad7ca77628b281806cab19c8deeb86c","sha1":"05ab2406df0fc89f09d0f8c7cea8fb144a00fd6c","sha256":"8772ea1db6f8431a16a4fba600fcbe162c220b237b12c7fd41ee9bfcabbfa62a","sha512":"e97a3149ada0b43d400b9014a8726a601a9008fd388b6d5c9f3963e52968903620d5e89e30c8839e2bcd960e4992d337207c2001729050c4a58aa33de6e6f256","ssdeep":"3072:UBZI0+6XZd1j5V10dXUhY4qZGXx79cyd5d2iU:uZztZdL2n","tlshash":"cc14184db750285a41d7836a40db8a0c63f8dd16ab02c25cf2b895ae6d65c4c32fbff5","size":192225,"data":"","first_seen":"2023-03-14T18:57:02Z","last_seen":"2026-09-24T10:05:31.326576Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/js/menu.js?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4d4cffb64803083612228d0e7a423e9","sha1":"a6713651d72216842540255d86d851c99118a7af","sha256":"3ccc8643f026c9ab87c4ad59b374793b8dab43e53e5ebf1a59644d24c06ea723","sha512":"61bb473018ed4f9dc4369503073b8310f847dfe8014be9e496d93c5ff307e2f6b16bacd0201b44ba46e7dcbf367a2672f67b7be8cb415df3983ac6c1b07835f4","ssdeep":"","tlshash":"9f518c88af2d627d56ebf0d5112ee415e53d4731d30a4892fa7893d80d8c21162efe2d","size":2449,"data":"","first_seen":"2023-03-07T13:00:58Z","last_seen":"2026-09-24T11:03:14.499949Z","times_seen":918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-24T12:24:27.59295Z","times_seen":103790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/ui/sortable.min.js?ver=1.11.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2896e90cc17e9abc160ed96bb86b07e3","sha1":"429499906351dea7dca03652f040eda029e5f159","sha256":"9023e3275b6d897b202ddb9848872a661fea055c96c2973a02e1cf5e39f04afd","sha512":"e103140e1fa141f5d479e772435e255e66d36cd05d145a8bf4de1d72643c0f37a17aa68569cc40bde4b6d685548377f387305a08d2a5a0fb40b49ac7c7eff357","ssdeep":"384:UHKUkojUUBog4kd9V2EpWXKLlxGdRJoMK+nIvHYpYmIt2AsYWvNk63uixQz:ryJBoghdeXQGhlaHSAkAsXez","tlshash":"56b2855eb6102236c18bd61c586a171d633bf11bf700c8bc757c8deea91de69107bab8","size":24899,"data":"","first_seen":"2023-03-07T12:04:29Z","last_seen":"2026-09-24T10:05:31.300238Z","times_seen":328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/ui/tabs.min.js?ver=1.11.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5330c83425ab1b8f67ce63f741427adb","sha1":"81405db33a325f50572b47ed0e854052b7241612","sha256":"429f6b7a5802c15145bddd69b400dae34b814eebd42ea1a32934c9a55a159391","sha512":"abf3876e1681ed8996cb8fb49c229f8f9802841e524084ef426cc802e2f10f85c8ed61a03bb6a5b94b016951cac2f4cabc96caba3d4b8037343ecd7e15040aff","ssdeep":"192:48gq1BjM0in81ReyKpaL7YWI+SM5BeuhUq2M4:48gSjMr8SrDW99aqX4","tlshash":"50427308328131b265dbb1e924379287a527e99d9504089c711b8fddaa7efc431f7e3b","size":12110,"data":"","first_seen":"2023-03-07T12:04:29Z","last_seen":"2026-09-24T10:05:31.30851Z","times_seen":410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/js/plugins//gmb-infobubble.min.js?ver=2.1.2","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c369de3c7e4cb0a61f7b83d3b28340aa","sha1":"bad48451d172be46db10c9822845f8372bd921c4","sha256":"d76c93e98af58874b7d29ffb5aa19eb7728e79b8bf20353385bdc0d56360ccbd","sha512":"64e087db67a4a0a871559a9d48911021d8e981df75896815df4a2138f4393e9e0ff61ef5852434713d38711d96e4cdfdeb496f7a997a09a38a089e408195e05d","ssdeep":"384:E+TznnlJedwVycT3P6GT2uHJmivOZF5Py/LTpbX0gypy3+AMWQ5wKV1XsRFyoYMv:NTznnlJedNcT3P6GT2upRvOZFIjtX0PO","tlshash":"40b224d0b6527824826ef08d101adb48bb3b917cf625c29c35f5ccf286f9e446a6e774","size":24526,"data":"","first_seen":"2023-03-07T14:03:25Z","last_seen":"2026-09-24T10:05:31.316401Z","times_seen":630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/LayerSlider/static/layerslider/js/layerslider.kreaturamedia.jquery.js?ver=6.6.2","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4810448131f955e40e93c662f546c865","sha1":"a898cf8d85de984eb08275fd471a3db7541cd4f2","sha256":"9197cefb4c4346a76c7de1307972f8c2c4ae6674528bdd36710a6d336fcf54cb","sha512":"2838f22701d38129cf6f46bd455c2c21b692044fb0ae89c3ccb9870eedea29a712507ec050f92613672965f12494fd78c07a698619d02cb1e98db0dd9b41b715","ssdeep":"3072:p0Hxi9LgMgGXsoa6nNaNdt/LpukzlzaEnQlsKG:fsoa6nNYdt/QilWBlsh","tlshash":"b2b32a2952049a3344dcc1d7328edf889eeb0cedda37de26f6d9ac6c288446dd193785","size":115576,"data":"","first_seen":"2023-03-14T18:57:02Z","last_seen":"2026-09-24T10:05:31.290407Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cf7f36bbd79bc0664b6113f7a7837fe","sha1":"ede1f6fe3d18a0685b30c6d465686de7870f578f","sha256":"38a448e9e03a9f64e7611b19af4bb8ec97fde2c708dc57ebbc7701be7ae3af08","sha512":"0b7264662a0c20264453d58e7c619e51251912125fa4c287b7d1a258709a671e0fd15f1f215c9c656ea6187cc32238b52bedb89eb5df2c20a9e2d45ab6ca50a8","ssdeep":"192:gqQ2vQ/wFyw6DExs/aaVWwLiEpcntkVosNFW:gIvcHaYGEetFsjW","tlshash":"9ce18588b35abe4649e7e124113f610ba23194ede0044c9dfcb8e5d96d7aad4b037f39","size":6908,"data":"","first_seen":"2023-03-07T12:04:29Z","last_seen":"2026-09-24T10:05:31.312327Z","times_seen":990,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-145380032-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3af32bd2b33c0606a8af67880929dbb","sha1":"3b65366a5dec10fe70ae9e6a58542ef10a267ddd","sha256":"43b4250a97d52a8be0f9d0a1896e22fc20603a550af70bf92e45d30705baa386","sha512":"2bc4a7f71c2ad5650f87450b8129cfb047379bd90f3ab15eeeb209264df8b6764c1ef8eafa2991d351d6514c2f2ed152a378a2e59d98adf07664dc6b4be62d72","ssdeep":"6144:jp1mivFwkl6ZRqsdcc1abxE/B3pd5ovLWrSH9G5m:6B46JoSrEJ","tlshash":"728419ccb3d6702283a3b574903f018bb27a6d92b84cc898f286d9d42e7465a5177f7d","size":382112,"data":"","first_seen":"2026-09-24T09:40:04.518468Z","last_seen":"2026-09-24T10:05:31.2891Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/js/scripts.js?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2f98af89d0950d4a1bc09db3e720f70","sha1":"07f852bcd7f33e2f318d01da40fb6642e7490592","sha256":"4ea7540c340ef23710017aa7347727fcf62d1f2ad78a3591024cfc7f18232e2b","sha512":"813c26a8bbeddc2264ca3b14af479a89ae46db2c5184ed602371e569b1b718e42d05b9e5a894673a3a41e3ab42a0f0c80ba1eb46bf3ec5dd47469b12a520fb6d","ssdeep":"1536:CbD42abRhULOaeTLYj7JJ+oXTMdYErYQAFed:CbT6UCaUL0NJ+oXTMdYEr8wd","tlshash":"1e7373c4ff5c752641bbd02d682fa0caf27d50329a458cf2bfac542c2fd454912ade69","size":77331,"data":"","first_seen":"2026-04-30T01:39:48.56248Z","last_seen":"2026-09-24T10:05:31.284439Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/js/frontend/google-maps-builder.min.js?ver=2.1.2","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"842a1ce97da82b060cf4be540c299e05","sha1":"162fead73a2bc8dc6327cd2a6344abd97b01b505","sha256":"ab3b0e03916b5e93455f356c6a3514a6197f9d1ee341209cd7d4d10bf4358d3e","sha512":"813718f04a0c3fc9a4fa16a9a8772d4298323473cd8a420adc8c3f4c3e5d1127fcbaa978aafb9bbb245fa3b849d24423269e5c51c7548c02da8247b2e9ccbe91","ssdeep":"192:O5Bj0m0dZ9cU4Hn3XYHUkQ/bEoDjZjohYOSY6mnr5Oz:bm0dDin3XGUkYlOSYVntOz","tlshash":"1822d74a7844687bc1f3b75c423f6b80a132fb8ed329d6631304c9b4a4b6d4de1b3965","size":10176,"data":"","first_seen":"2023-03-07T14:03:25Z","last_seen":"2026-09-24T10:05:31.319873Z","times_seen":579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/includes/libraries/map-icons/js/map-icons.js?ver=2.1.2","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1a0c2fa271b0048d8fe96e1d15d16ee","sha1":"ae4076a34116a028551f8a0043df9f1f5173c617","sha256":"7a1f3b17dff117ebb257fecca1759c81fbdbf4f082503f18729850fa3867cbdf","sha512":"c74ad640583153e39a0852bbab7208e0b3f72b0768f676e5f215e51356c0a3170ec7754a3b2ff734d180682cc64cc7b86e1b08efedf0b38c811c3fff8a9d10b0","ssdeep":"96:UlZsTt2u0yXS+/AP9sLC4HINAnAKAWVDzEsF56KF9iMRYT6m8DGhwM:UltuHS9jCnddDzzrEbQDGWM","tlshash":"8ba1938e9b7010f4d5a3735d6e3f5f9a7aba90b95bd4824c702dcae40fa28481349df4","size":4673,"data":"","first_seen":"2023-03-07T14:03:25Z","last_seen":"2026-09-24T10:05:31.317022Z","times_seen":631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/jquery.js?ver=1.12.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5ba5044fccc0297be7b262ce669a7c","sha1":"f137ff98ae379e35b0702967d3b6866a0a40e3be","sha256":"cf34e1b87bbfd9d9b185dec994924a496e279d8dc9387ad8d35bc0110134c4d3","sha512":"bab5eb2c4acc0cb1c65e8dedbd6b422480fc20076d6c1b12879cbf1e5b352969e1553a0e878401c2f2b9507b64b02e8abd4c6d1ab7e3d2c06272a491ee712e8a","ssdeep":"1536:HYE1fGBiByJsbfXXeRJ/shgWCeLLccJdZVHk04ssx+/mvaSIFSet43tpXJIGVypf:fsAg0psxTva/FSeKy2bDD5a98HrU","tlshash":"2493e8d9b2d6715287b734a850bf410bb17a98dab80c4c60f058d8e47e78e9d607bf2d","size":96874,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-09-24T10:05:31.278467Z","times_seen":12753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/snazzy-maps/snazzymaps.js?ver=1.4.0","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8b6bfbc76f3942076078846f8d67d93","sha1":"055eb0208b8477d64a1680890318fb699e16ce1e","sha256":"ce03edab83c54dc71101d2b8fccbe2d1ec5c29806a933a366db236b2d455ad29","sha512":"994cc7fc58f469f0a5801179954ae69c3ef5352bda20c4a478747d5346a69d1a7ac9ab096776fa3abbc4147dd2ce8b2464dd99bd312d44c198555c9fd5c5c689","ssdeep":"96:Myh4qqUzF4n72aENdV40qQYxEgKJ5q4qu7JJS0JbU2lfAUMNduzPvQOR5AAn6x/S:oqsnLVTP455RpV5xfAAn6JOEyEYt","tlshash":"63a1dacfba34f8238563a651183f810ba23d9635148845d4a790ddf12cf6d5f072ef29","size":5068,"data":"","first_seen":"2023-03-07T12:57:02Z","last_seen":"2026-09-24T10:05:31.318922Z","times_seen":1481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?v=3.exp\u0026libraries=places\u0026key=AIzaSyAP65PTLGijHdv0IL4tm_5rVmwMiwdQCbc\u0026ver=4.9.13","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"30cf0cbd48657d21efda234c0305c944","sha1":"25dba9a1337a5f90347b85c126a67ba50afd5a2a","sha256":"f0e497836607675fe646bd5b2ab4edb29b2f39056af602862709043516934d9f","sha512":"8def3a44cb42f348c2ea83bdf9c06c050c75703c584155fc242dc3880695f640ee2898e31b11d78054d0c06f0520afbf74daee3da3ba25f2964e9c4ae680c7c4","ssdeep":"24576:8az8GbWgNJHO+YaUTtXebvU29Dyqoj3RvVIWQtT1ec/ZM7ANNt+c32++oRGVGw0:8az8GbWgNJHO+YaYtXebvU29Dyqoj3RQ","tlshash":"79555dac72613666da73d465811b1106f238b88bf00889fcf9acd9e29ff5d8541f6b34","size":1364346,"data":"","first_seen":"2026-09-24T10:05:31.327886Z","last_seen":"2026-09-24T10:05:31.327886Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcff4f0f0eaaf75435e924eec527616d","sha1":"fe1e7850635b2a1564e8f7f3195617d2eaba73d7","sha256":"552825b186d7451e0bf6df23e2b78b333e0ccc81aea2dd19055a8adf4b9fe329","sha512":"4024f94cefa21823abf2b5e43199747565c376da220756f5051816aa4ce8ec2fe6af69b483163e566fb82ff46799d3f32d9426700c4c5d24a71e647fe165f784","ssdeep":"1536:PgPF9fSwqM/mvnRo7o5M1WGfL55CJs3Iew+AHk0v+:P6Kd/GfL5wsW++P2","tlshash":"1e33b51f7249a65986b3d095707b018a367a85a09186c91cf439ffddce2ce0ec17ebb4","size":52702,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-09-24T11:03:14.438509Z","times_seen":2109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/wp-embed.min.js?ver=4.9.13","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dce40d16f9ff6332d3cbb7ae488a2b9","sha1":"0a8eca5975f21a9f1bc079d111ca1657009dbe8f","sha256":"2152557cac69e2bd7d6debef5037a9f554f9209cc305b8141b3329acb10c42b7","sha512":"8c5cafbc2ce3705735ff1131ab34c2aef7aa50bf25ba13f0a29c07713561b0e6522c93596c8047ec332e7fa98565a9de56cf040632149b255b58d0bbc43fba7b","ssdeep":"","tlshash":"7921441a3338143b10db11e3b99d74c7d6f207ee240121d28d78c880fa94fa39966fc5","size":1403,"data":"","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-09-24T10:05:31.292213Z","times_seen":3570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JGTVB5RY02\u0026cx=c\u0026gtm=4e69m1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e7b76663aec1ee5750180203128c48a","sha1":"9b4dbc363cc5bb2a1959d9e0eb8a723b6e6b0bc8","sha256":"725c29f84d4a32e959c06efc2a15b954ad4c408c2a885d2e23ea017b267043ef","sha512":"674003d6ac164e4f9111e0bd6ded6e2a1ccaa3e6c5a57d9de0ed95597eff43d40b9a648116a1a4f2b591c8fcb9e31a74fa2e15ce93ef2d8ef3805fec0d53d345","ssdeep":"6144:tCp1mijFW0XwgY6J4HnrgoUdOc1abxE/B3pd3wrLWNUDT9HD8eQm:7IFWhx6YhiwuNqBl","tlshash":"63b419cd73c674229396f678903f01cb667b29a2b48cc89af289dce02d3455a5163f7c","size":522939,"data":"","first_seen":"2026-09-24T09:40:04.525369Z","last_seen":"2026-09-24T10:05:31.31354Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.9.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"760f1701aad76d6a4548ce5c39dc4992","sha1":"223ebe0dc172040e5cbbf0f73e03982b5d7858d4","sha256":"f7db88a5dd4feb92dafbf5b17b516ddb78cfe69daff23ed72453a6a561b367f1","sha512":"6c51444bc6dbe9b25ed48943540f754a421b271ecc5d698b1fda20bf9524badd7996f2a08e54d9f189875e02510623c5a84c875a5edea5e5a59c0e8a2fefac31","ssdeep":"384:Y0KR2j16xNN7FUx4fCauIC+V+oeBrdYvfyOJK8VJVyv3S3OVkl9UQznC:Rrj16xNN7Cx4fj4BgVJIv3ZVaC","tlshash":"e25262c8f3fe1185c27a30b96c8f86dd2b7e6471e40215aafd9c646028dc8792725f2d","size":13908,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-09-24T10:05:31.279322Z","times_seen":1023,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/js/plugins.js?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"436788b818125f41a42025dcad40fee1","sha1":"3d5f058aec1e0977db367438dc9ddb520ea14d7f","sha256":"d5d8451a6e9625d61190156d92fbba3ce6e3035c04d9f970e70a17984cd48e36","sha512":"e46a2549e4c57a5246b67984cff927cd6289ae442bea1074f8da15f3a9c3f5624634a4752aa9fc57bbd3ccfa1fadf88fcc506d7b95a1d347e3b0ca194ae67657","ssdeep":"3072:JKWSBnVD6YD6Ee4+Q9z8j9DTr2zy4wVUG1Gul:fSBnMpDezIUG1Gul","tlshash":"01142a98b200362106db61f5d25f420e733be479aa0780e87159ccf52dbd96da2a3f7d","size":195867,"data":"","first_seen":"2023-03-07T13:14:32Z","last_seen":"2026-09-24T10:05:31.325549Z","times_seen":552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/assets/animations/animations.min.js?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecd2988783bb4e49f6a242620d54ac21","sha1":"6863076f3f4c1d0203e511258703af9f02fc97a7","sha256":"20fbf71645de91c6368d758f878b980c72bce11166a26902bc3e9625eac51833","sha512":"4778fc6084a1aebfe76da092c485e1451ff50bb2fb9b57ca4657b4bbe821c194b1bd39f0e8bf7b947e320661c4a7f46231a9c0e9ee95d2816e7809ea037f9899","ssdeep":"","tlshash":"6a41ae4a3a8104ea02bf16b2f4bf131435a7663cf676056870b8b4587824f9c77779be","size":1896,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-09-24T10:05:31.300823Z","times_seen":2057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-DR8DD01NEL\u0026cx=c\u0026gtm=4e69m1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"04e7e8926e335134c2c52a3195729477","sha1":"01f6a0ce662271ad4fab8fb4806ed9f5df40e60e","sha256":"318247920c6d4406e21187adf66effc744563923e9fc9c963bde3c83e833f9d4","sha512":"aabe286f2313be17beb9bb6ab7584cdbc30ea1fb1da8ead8dca877fa501d80965f907871186f39a2e2898edd5b681a66dc09907feb9004aed3292343b3a1c785","ssdeep":"6144:dhKp1mijFW0XwgY6JDjrU8dOc1abxE/B3pd3KrLWn6DT9HlrfRQm:RIFWhx6FPKunkBFL","tlshash":"8ea409cd73c674229392f674903f018ba67b69a2b84cc899f289dcd42d3469a5173f7c","size":465481,"data":"","first_seen":"2026-09-24T10:05:31.307038Z","last_seen":"2026-09-24T10:05:31.307038Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3699ba7015a9af3f89dbbffc4b39689e","sha1":"d7ec9f3e4b3812bd19d2fcb03186b0e69eb1758b","sha256":"c7b71f1406e38c3ff795a4990e2b904f6b64e48c86e4579c518dd872e962bec7","sha512":"4e6708e39969af8d41c86335847728bc2185388c3f5d5f35ef8326c60d8194d1eea858edb1c94c766db8b109a521e87e441f27e35479c359aeaf16676e019244","ssdeep":"192:fRnblCTra+4JQaGgxGgLl3Z02EKkio7d684E9MeMWvEPE+cVeVu2lKJe79vFddz7:p+XYOX+VG45YD52Ay9WTTKsYB9nCgbND","tlshash":"5833dd4fb291f26503938d4496c50a5b133d6029ebbf0c1cb636a35918639661b3bbff","size":50799,"data":"","first_seen":"2023-09-18T02:44:29Z","last_seen":"2026-09-24T11:03:14.596246Z","times_seen":3996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 1.4.1","filename":"https://studioswit.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1","line_number":2,"column_number":552},{"level":"warn","text":"Google Maps JavaScript API has been loaded directly without loading=async. This can result in suboptimal performance. For best-practice loading patterns please see https://goo.gle/js-api-loading","filename":"https://maps.googleapis.com/maps/api/js?v=3.exp\u0026libraries=places\u0026key=AIzaSyAP65PTLGijHdv0IL4tm_5rVmwMiwdQCbc\u0026ver=4.9.13","line_number":2616,"column_number":325},{"level":"warn","text":"As of February 21st, 2024, google.maps.Marker is deprecated. Please use google.maps.marker.AdvancedMarkerElement instead. At this time, google.maps.Marker is not scheduled to be discontinued, but google.maps.marker.AdvancedMarkerElement is recommended over google.maps.Marker. While google.maps.Marker will continue to receive bug fixes for any major regressions, existing bugs in google.maps.Marker will not be addressed. At least 12 months notice will be given before support is discontinued. Please see https://developers.google.com/maps/deprecations for additional details and https://developers.google.com/maps/documentation/javascript/advanced-markers/migration for the migration guide.","filename":"https://maps.googleapis.com/maps/api/js?v=3.exp\u0026libraries=places\u0026key=AIzaSyAP65PTLGijHdv0IL4tm_5rVmwMiwdQCbc\u0026ver=4.9.13","line_number":2717,"column_number":208},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/assets/jplayer/css/jplayer.blue.monday.css?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.916Z","timestamp":1790244253916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/assets/jplayer/css/jplayer.blue.monday.css?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLX3c%2FXFvLnkBBjGtXE5rZDYyxlzl48Z%2FX517omLjOdb%2BYgYBVGQ%2FsOOT2X8hG0lvenDL64Iy9QxniHJdRmuLI4T8%2FA33o82TO2GS2UCpLouMlAuY0rV24CPArm98K62Uyo%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a400f6bafd27dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"266a-5a0c7246-320135832ce4069f;br\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 15 Nov 2017 16:58:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9834,"size_decoded":2746,"mime_type":"text/css","magic":"ASCII text","md5":"ee492960b5dc4a3a6f9ea59e140edbde","sha1":"c26bfe5d735342a72ac1f67169ce30f0aaf1efa6","sha256":"593998021e5710fcc6797244da4006389ea8a5c15dc3ce7a661685cb36638844","sha512":"e47cb00901534be5f0fe1425fb49bc603a0073a39a3b467686ac8582f136bb56c57967671d7d112090dda1f4813677021d8a5d5d85194307f6d7d6df090ab44d","ssdeep":"96:oSccN1Yc3Hn3TSnThnUWMu/KOqDZdlt53Y3KLf3+x3kWKTIvf8dPTT5wTumePvUm:oSbjEFPKOqRTW8Z2CVaOF","tlshash":"1512df2098b0d53ff79b955328e89be9333ad041af632f2d7117b7b44c8625ea135385","first_seen":"2023-04-05T10:58:02Z","last_seen":"2026-09-24T11:03:14.465959Z","times_seen":2219,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.924Z","timestamp":1790244253924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IbVlZFQyWqsamX7G1v4BrOg9LmjJG4M%2FNiNJKXa1S8vv%2Bum7eecpZPu4xKh6O0z9J7fIsGnZk9MKRviSY5UwMtesvyMeppYaQdDASZVgtWqzCGlEv8krH6Xk%2FaGMJY%2Fxtx0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a400f6bb0d2edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10056,"size_decoded":4838,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9959)","md5":"7121994eec5320fbe6586463bf9651c2","sha1":"90532aff6d4121954254cdf04994d834f7ec169b","sha256":"48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d","sha512":"b74a2f03c64e883b9a34de43690429327dfb4aa230a7a6afca8150a16e3d84e98461245ff264c26368d9904562cc34fe219f71f951d364fa5c68c039b76776cd","ssdeep":"192:kZrk/GNyd31svs7wkX8KzJcqSDdAcHX4YE5NLR:srhNyNO0kkMKzFSDdAcIYwLR","tlshash":"2e22c79db29a70625fba35f8617fc11b717a94fc2118d9e4a08c8ed1387dc9d403ab39","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-09-24T12:16:49.50302Z","times_seen":61251,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2017/11/manfrotto.png","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.316Z","timestamp":1790244254316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2017/11/manfrotto.png HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://studioswit.live/\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a400f6bd7dbcdfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"570c-5a174dc4-d8036169843b2953;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Thu, 23 Nov 2017 22:37:56 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXWnQg6BpW5%2F%2FebuAQpo%2B7ou%2FykjtHt%2FOh04JAJoF9ElNF7w4%2BvM4q400akuZxodEsZ2u9bkmKw8efxml2%2BYJJIenogjRSxR25fXzXpMzwcYdg7hNHpxbB58YsZsDt3KnfU%3D\"}]}\r\ncontent-length: 22284\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22284,"size_decoded":23109,"mime_type":"image/png","magic":"PNG image data, 200 x 100, 8-bit/color RGBA, non-interlaced","md5":"c1f0f6145ac204e79c5e19255b523dbb","sha1":"2a360902c54af0d852f03359130f93236057f427","sha256":"5ebe79cc4ff1a858c95a16f74f64dae5c4f00f9eec93708268487a5921922956","sha512":"cc0983be67c6ab6bf7123ae0532ab5c56b1d433e409f0f38f410efbe82c5adff8a5bceb99da03669a275bfe699c150dd64b6b7f715328cb9babcd95804f1cd85","ssdeep":"192:wSSktMKQz0MNEmEe1oktspoNOToRXnmLg/IwDEZpZQEo7iy5:XRtMK5MNJrsVYm+Enxomy5","tlshash":"00a27d3ab5f57668108a467b24d038859e734fc3dc91dd05b9cc886e6f20b5d8caf7a2","first_seen":"2026-09-24T09:40:04.600591Z","last_seen":"2026-09-24T10:05:31.275271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/images/box_shadow.png","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.558Z","timestamp":1790244254558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/images/box_shadow.png HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/wp-content/themes/betheme/css/shortcodes.css?ver=20.7.2.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a400f6befe00dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"6c-5a0c7247-5c728823f3019b40;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:53 GMT\r\nlast-modified: Wed, 15 Nov 2017 16:58:47 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=011Dpfj7OtAo0pRt48ZGDkoi7aDqXTUzmzpcKFLnIX%2F3pHFvoJAzxV4lzumjOQ8Ee8rxkwSgINFW2Qwbgysyd%2BOFW2pE8rzWWYdXpMBlw3bYslEl5rfCDQLs%2BMDCZPq2aZY%3D\"}]}\r\ncontent-length: 108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108,"size_decoded":921,"mime_type":"image/png","magic":"PNG image data, 5 x 3, 2-bit colormap, non-interlaced","md5":"449d9ef55c135a86ebd8ec91c7f170e6","sha1":"acbb68ea104cfdd08081c66ce8a151e4668ef313","sha256":"3f10d52942270b9e2da36af3915028bd73dfab3703bc13f060234cb0aa5bae2f","sha512":"7e9aaa45e65c46d835e16dce4438071390f1e0d551ca0cac44d0a0e837a6984faccc9e3d3d5ab9a9142a68bfb6a91d49c8e0f59efe17d06850d83801e9458a84","ssdeep":"","tlshash":"5eb012f395604ef2d786543f661844109830911c3332094f14cfc57c6d573c0c2c9502","first_seen":"2023-04-05T16:26:37Z","last_seen":"2026-09-24T10:05:31.276025Z","times_seen":981,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwaPGR_p.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.632Z","timestamp":1790244254632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwaPGR_p.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://studioswit.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:54:11 GMT\r\nexpires: Tue, 21 Sep 2027 15:54:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:11:37 GMT\r\ncontent-type: font/woff2\r\nage: 238203\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5552,"size_decoded":6364,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5552, version 1.0","md5":"33c906549bd61edf700e9a28132f25f8","sha1":"30128ef02a089c98139c978a2a0cedaadd634dbe","sha256":"3a5797f440bc67b59830cad81e59a71011e35cb45ed7f747b61a69b0a9b0d6ae","sha512":"dc4a63153cec46714504239de7184f87585c5805498300c8d1ba066053135ca04895f1484e739ee3fc492baba6920b5686e40a05ade1b962e5113a9635013503","ssdeep":"96:tg4V29KoaW+ekf+c3aIw2Lp/HwoGccbVjNRFRf7g/v/88V6PnW4+Kydey7kh:tnKKovjHULVHwMcbtFR+v082njyPg","tlshash":"c6b1ae0c7d929cebf5ac14792c508c34199b5eac8f5ee94c8c860c2a02e25dd1e0e7be","first_seen":"2025-09-17T01:22:23.26484Z","last_seen":"2026-09-24T10:05:31.276586Z","times_seen":4013,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/LayerSlider/static/layerslider/css/layerslider.css?ver=6.6.2","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.897Z","timestamp":1790244253897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/LayerSlider/static/layerslider/css/layerslider.css?ver=6.6.2 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OEpAHS%2BpdVqzgE5GXECxmrQzivyd6X82MwCrRI%2BfgfAGl4myYUHDXE8Vugeg68ZukoJf7KMXLxPXas1hjk9rsZ76k0pXfvN6gSo703f50FLJFYLDoqmF1pNMOuWn%2FbPTcJk%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a400f6badd18dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"528d-5a0c7743-e3aa9bb98b1fdb88;br\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 15 Nov 2017 17:20:03 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21133,"size_decoded":4502,"mime_type":"text/css","magic":"ASCII text","md5":"dcb2cfe7cd3486cf3c9c6bf1c3f82561","sha1":"b212ed83cf9faaf4228241cb1218d68fdb02aa64","sha256":"664d93fd1340038b753322dc70e1147852c70739d103e801c8b5d626863066c9","sha512":"b57e843eaca73da8deef4c0fb639df376b1d2fec809bd821edfb8480e85816ac04108361b8723f3e7e8092464633d3f1029ada82173db8b023bf620c0542cba2","ssdeep":"384:r0o2pnEJsKz3KupdDbHwQT5SRLJ0dDMSmTOHwS:r0o2KjdMSh","tlshash":"f9921451eb6c1100b526526f68ae63bd1d7c502abb860fbffc85b53587c43c813e7aa1","first_seen":"2023-04-11T20:43:08Z","last_seen":"2026-09-24T10:05:31.277171Z","times_seen":232,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/includes/libraries/map-icons/css/map-icons.css?ver=2.1.2","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.905Z","timestamp":1790244253905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/includes/libraries/map-icons/css/map-icons.css?ver=2.1.2 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cn2zW3F7GVISeWQANEQriuPm9dJP3XQnypWgBQPrbBKxZa%2Bwsca5zy%2FgxVztzp9jG4Sjn5HNL2vz8BfdScLZH1RqO0VEYUaa%2FvA1s4BNoR1bMvbC4HNXJTYNN4hUfT4KXN8%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a400f6baed1edfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"3680-5a0f25b9-97711780d75ded7e;br\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Fri, 17 Nov 2017 18:08:57 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13952,"size_decoded":3413,"mime_type":"text/css","magic":"ASCII text, with very long lines (3883)","md5":"4eecb004d3b43f5016cacc6071707675","sha1":"96d090b000ef4b04bceaf5a0d91b13e8d8726ccb","sha256":"d76925fb6477fe5ac510acac2b76e156988cdb412483524e37611dad7495cf82","sha512":"8debfb428001b6c428bf2fbf5a662f90edda561b42e121d847b782de1486d8af57985ba274dc34441dbf701f6f97e3445c9d3e7b093b59aaf81c2dfdbb02fffc","ssdeep":"192:0d9nrZmQUqxqaBm/tkV1oV7H29Xj2KwI/+itcULgpf2juRYr7XmGYbumq60drp:SrdQaBm/aoV7GPB/+bUU+TT","tlshash":"245269e4dd0e3492d782d8d5af402b101bb9e229ddc16c8ff712782ca6f22658585ff8","first_seen":"2023-04-09T15:58:26Z","last_seen":"2026-09-24T10:05:31.277938Z","times_seen":636,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/jquery.js?ver=1.12.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.922Z","timestamp":1790244253922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PkflANndN4YWA%2FjXWu8nV%2F8MHycYzqUMjfpOebO2VJkczWzGKuc3mN0v%2FkYMDYKh0NLIatzB5bU%2B%2BO3KSG95EZX9jUcv7Vz7Uo3NQTS8cE1dr94mbjdHFUyCLDCbFszeEdc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a400f6bb0d2cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96874,"size_decoded":36335,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"dc5ba5044fccc0297be7b262ce669a7c","sha1":"f137ff98ae379e35b0702967d3b6866a0a40e3be","sha256":"cf34e1b87bbfd9d9b185dec994924a496e279d8dc9387ad8d35bc0110134c4d3","sha512":"bab5eb2c4acc0cb1c65e8dedbd6b422480fc20076d6c1b12879cbf1e5b352969e1553a0e878401c2f2b9507b64b02e8abd4c6d1ab7e3d2c06272a491ee712e8a","ssdeep":"1536:HYE1fGBiByJsbfXXeRJ/shgWCeLLccJdZVHk04ssx+/mvaSIFSet43tpXJIGVypf:fsAg0psxTva/FSeKy2bDD5a98HrU","tlshash":"2493e8d9b2d6715287b734a850bf410bb17a98dab80c4c60f058d8e47e78e9d607bf2d","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-09-24T10:05:31.278467Z","times_seen":12753,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.9.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.939Z","timestamp":1790244253939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.9.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vzwnZf4K7gRKhWrYhJHb6sZ9fd0Aw9st0uPwQYrDVM7v0MndOmHNziL78nq7k%2BE70rsjixxci%2FA8z7mjtKyfC7hGfTjRkPgp6rLpTI%2BOdszsEPGR1g6lTH9CxqYLeoJGtAA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb1d37dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13908,"size_decoded":4807,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"760f1701aad76d6a4548ce5c39dc4992","sha1":"223ebe0dc172040e5cbbf0f73e03982b5d7858d4","sha256":"f7db88a5dd4feb92dafbf5b17b516ddb78cfe69daff23ed72453a6a561b367f1","sha512":"6c51444bc6dbe9b25ed48943540f754a421b271ecc5d698b1fda20bf9524badd7996f2a08e54d9f189875e02510623c5a84c875a5edea5e5a59c0e8a2fefac31","ssdeep":"384:Y0KR2j16xNN7FUx4fCauIC+V+oeBrdYvfyOJK8VJVyv3S3OVkl9UQznC:Rrj16xNN7Cx4fj4BgVJIv3ZVaC","tlshash":"e25262c8f3fe1185c27a30b96c8f86dd2b7e6471e40215aafd9c646028dc8792725f2d","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-09-24T10:05:31.279322Z","times_seen":1023,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2023/03/StudioSwit-5-strona-www-1.jpg","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.013Z","timestamp":1790244254013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/StudioSwit-5-strona-www-1.jpg HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a400f6bb9d5ddfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"cf141-6419162c-b394ef612eb360e8;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Tue, 21 Mar 2023 02:27:56 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIkNnQDq%2BXoApxVe%2FYbh02XwaJgMqlbKw88smCRil9pEn5FZ9AuEothiEhCTj%2Fbe9E3H6%2FT9PVG5RqyK3KHAnopwSGi0waPbjcto78tOYbySa0tfikdTgStWFJQhJi%2BBLhM%3D\"}]}\r\ncontent-length: 848193\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":848193,"size_decoded":849017,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1800x1200, components 3","md5":"a7f19ecdbab764face002a36c772c2f6","sha1":"6040a34095c3eefd96fbb4b04f640d2132df463f","sha256":"28129649cb3f4ea7361017324b7cbe12b1040f649dce4a0ea22de72b2c65bf49","sha512":"9126fddb84ef117cc7b48f55277c134fd4db77efac31b8b7f148c80a5139f5d94b970d8b135a7869bc9d7e32bdc956c874403f9365da2a6a58847f0b9fb5c5f6","ssdeep":"12288:eLHybz6ZDGT/7cvxwA8h6J4C0P3NSaCOepoP5a6T0HvLZGjT6yk2U+vxhd46:eLSbehGTgZwxC0P3NS7po/KKvxL46","tlshash":"150523d08c7ba2e908ee44e6af97a20876540f73109a7b4a74d51df7cfe6d49c18148f","first_seen":"2026-09-24T09:40:04.5057Z","last_seen":"2026-09-24T10:05:31.279808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.627Z","timestamp":1790244254627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://studioswit.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:01:34 GMT\r\nexpires: Tue, 21 Sep 2027 16:01:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:42 GMT\r\ncontent-type: font/woff2\r\nage: 237760\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5612,"size_decoded":6424,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5612, version 1.0","md5":"633f8feda2188d767d2396652da17377","sha1":"d35cc70037f82ab61d86f2c4d80685a474821d45","sha256":"8b9fc9737043f88c1a9a7195c27a239bd329cc33d928ffb67736c61ae7a1dbbd","sha512":"edadc35473adc7d3d2b6c0bc04789dc78c7f38c0eccac6f08625738d5c8cfa9203c1d9ef2ee6ce721fabc5a4eba41cd19f47e56dc85ff3bc1f7f0ede2ec5ba0b","ssdeep":"96:iD0G8mpQLE+J8uftoCUdUZ/OGjfSg7uov39XTr9a8dBmhPk7jJ5lpqaAjiv/8qBA:7xXLZ8uVoCUdUFOGjJ7Pv39Pw0MiZ5cB","tlshash":"23c1af36b54e1d4bf74201b8137b823e41c70c621637356dbb16aa9418dcf4161371e7","first_seen":"2025-09-17T03:45:02.002945Z","last_seen":"2026-09-24T10:05:31.280369Z","times_seen":5652,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2017/11/linia.png","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.312Z","timestamp":1790244254312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2017/11/linia.png HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://studioswit.live/\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a400f6bd7db8dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"3afc-5a1efcf4-586cb136c37e2f67;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 29 Nov 2017 18:31:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4I0uoduZemr3U8I96gyivtR44WVUFqsCAGek4PwXsK%2BcvWPQd45ABsr%2B2X9PuJJbVRBAvLyDrxSPLviLmH%2BcITDWfSbu7CzPGeb%2FZ%2BqHzeG80aHHPgj%2BJ4xqqRs%2BNQcUDY%3D\"}]}\r\ncontent-length: 15100\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15100,"size_decoded":15927,"mime_type":"image/png","magic":"PNG image data, 306 x 29, 8-bit/color RGBA, non-interlaced","md5":"82b8e5d8284937c040dd069d7f38f0e7","sha1":"45bc8873814851c3f8b4426572f6e8f312e9ee6a","sha256":"13cba0d6346d6a0c73a5e366568cf32037539d6addb9a0a0a6742fe1f525dded","sha512":"1851344495cc2ee8656d853e1e1b548dc23a8b7bdea00b671acf1a67c9bc768a7b364ffbb5ebe1e0af2b62bc1d1e83f6630ab03e90600e76c1a25967cd028770","ssdeep":"48:H/6VM+k29W8sEv7xN+Y9jn/soABCljlLTgHsc5bcq7wT:HSnkEWR2xNXzsuYsc5/wT","tlshash":"9c627224fdf135a6608ae6326de534054e734b83c981ac46facd9c562f10bed8c1fa86","first_seen":"2026-09-24T09:40:04.569334Z","last_seen":"2026-09-24T10:05:31.280899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/contact-form-7/images/ajax-loader.gif","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.701Z","timestamp":1790244254701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/images/ajax-loader.gif HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.9.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/gif\r\npriority: u=4,i\r\ncf-ray: a400f6bfee17dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"34f-5a0c773c-71283d7c06a5caf8;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:53 GMT\r\nlast-modified: Wed, 15 Nov 2017 17:19:56 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e6iJOqdI8TyvT2sW3PVxEuCQXBSyOiLV%2FB%2FbczDqVINPVMX%2FHQlsV1%2FbrIOSqi%2FSW8ZDx0iDI3CQrY9P%2BS21WxVBM0vrA1W7IO2zCwMzZZ1WRGaFg62KOUwDLEP6MXPeQ1U%3D\"}]}\r\ncontent-length: 847\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":847,"size_decoded":1667,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"af962b37779a443a77ab836b3b7a93f5","sha1":"cad7feb11183c71b87470e11e022b16ecdcc7ac9","sha256":"65b72e15d975f67fbd1cb126d57772c06c21fa016e5651b6ce213b26ce0e6877","sha512":"8897ed0d798dfc6b596d25b7efb88ca4065f0e9c7f53497553892a9debc145e7d5c250a817895acf8c9eb4f0fb76c3231ff9a6bd842493f16b31b31f80f5bbc7","ssdeep":"","tlshash":"2c01fd94c6ae9537ff8be4b8c80fe6597d100123778caa112890a834ed1b37b81397d1","first_seen":"2023-04-17T10:56:22Z","last_seen":"2026-09-24T10:05:31.281753Z","times_seen":5557,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2017/11/fav-1.png","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.789Z","timestamp":1790244254789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2017/11/fav-1.png HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a400f6c06e1fdfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1520\r\ncache-control: public, max-age=604800\r\netag: \"eea5-5a0ee7c5-5422c6258e656896;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:53 GMT\r\nlast-modified: Fri, 17 Nov 2017 13:44:37 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iY0EXkq%2Fr0h%2BKf3qdGhsWl3CFizgME51J%2BW9ABj9gUL6SAbVkjxeZhYJlri%2BjF%2FxDMLy%2BPyV%2Fy2j2xXcxSstyAi7XiPJdWoHEftI0tBzWhMwJzwYkwd1Dz7Itf7cgFaH3vo%3D\"}]}\r\ncontent-length: 61093\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":61093,"size_decoded":61921,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"cc3e52fccedc886d58807f733d486c1b","sha1":"c4a08a0f9128c6bb4422789b39ae24b1efd4eaa1","sha256":"1d2395382864bade5916bef9bbb5c935896137bc32d063376e7d3be4a59d6d0b","sha512":"01d818e4b4d9d5ab78e652b1c48627774868b51f4d07e4da1506dfe8b9ef4a90b3d668950a0ac1cb4d667cd34325639ef4d000d384927a5919f1005b61f08ab4","ssdeep":"384:VXE05XNAtWq/zJdfY3GE5ejUQsrP0ZO6tqtjRsz:h35XuNbJdfY3I1sL0ZOmr","tlshash":"ee53db227ff659a5c21de2a512c438893dc7368fc5f02d8bface4e91ef6461444cb64a","first_seen":"2026-09-24T10:05:31.282235Z","last_seen":"2026-09-24T10:05:31.282235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/css/shortcodes.css?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.911Z","timestamp":1790244253911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/css/shortcodes.css?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFBNwJQvhEDOkaHx3nwIbkG3XOywLQ0vlmk0Uxj077znldarXhbSnj4srxjiyHigIVoXYkJynuJ79cU%2B8KwGh7yafmTygTd4iYwuidKOx4kUzmTIvUrH%2F6%2F%2FjWBvv7Dcxts%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a400f6bafd24dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"21c3c-5a0c7246-42e2ae30655577e8;br\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 15 Nov 2017 16:58:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":138300,"size_decoded":22088,"mime_type":"text/css","magic":"ASCII text, with very long lines (404)","md5":"5989e28a4284d9cb8586a9453f47ec52","sha1":"f65d54ae2d64af26dde9980ec2a4c0b2dcc84570","sha256":"fd8a61ec0b5bf83d726a96c7b63ddce6fee749e5561331631475b44fd002f290","sha512":"9f51706da8d9eb9daa91f9f6dd20472ed5ad31c709ba5777d199776e081d767fedfb6c1db392574b040d8cc1183b789fd77fafd206c7fad5cdf0afbc186a4e9f","ssdeep":"1536:QT5+N87TmM5rB+ip7SyhEkyCEUQ4KwCYyaceil9N3jqrc:QT5+WtrB+ipQ9NTqw","tlshash":"22d399665d223008a237c73db7c5eeacea784123e7530dbff296952ac7461c9027e6c5","first_seen":"2023-08-30T05:54:43Z","last_seen":"2026-09-24T10:05:31.283384Z","times_seen":20,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/js/menu.js?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.953Z","timestamp":1790244253953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/js/menu.js?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2KMz8RC1UiDtmp6UEKcBFDITUPDUQSMVfKIDGAyQrbY%2BgJ9GlNVgV05D%2BrCKsUg3SRZYXII7DJI3BhmbWftXkpWJ3Lu0OnWxeQ%2BHw%2FaJl1wj4YRQQrSnMe3Eq04BawtbGtw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb3d41dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2449,"size_decoded":1532,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e4d4cffb64803083612228d0e7a423e9","sha1":"a6713651d72216842540255d86d851c99118a7af","sha256":"3ccc8643f026c9ab87c4ad59b374793b8dab43e53e5ebf1a59644d24c06ea723","sha512":"61bb473018ed4f9dc4369503073b8310f847dfe8014be9e496d93c5ff307e2f6b16bacd0201b44ba46e7dcbf367a2672f67b7be8cb415df3983ac6c1b07835f4","ssdeep":"","tlshash":"9f518c88af2d627d56ebf0d5112ee415e53d4731d30a4892fa7893d80d8c21162efe2d","first_seen":"2023-03-07T13:00:58Z","last_seen":"2026-09-24T11:03:14.499949Z","times_seen":918,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/js/scripts.js?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.958Z","timestamp":1790244253958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/js/scripts.js?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8voLn2atY8a%2FM%2FoesPWA7cxa5hEsv65uyv1ykqb1IGdOp4sopTNcbIF%2FYeRTz6C2jOlnM%2FEd2HhXrf0a%2F1vFfzuyGICsQb1DKr49Vem1I2WRp4PERrZPxNcI%2BX8gkoFVAT8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb3d45dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77331,"size_decoded":16912,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c2f98af89d0950d4a1bc09db3e720f70","sha1":"07f852bcd7f33e2f318d01da40fb6642e7490592","sha256":"4ea7540c340ef23710017aa7347727fcf62d1f2ad78a3591024cfc7f18232e2b","sha512":"813c26a8bbeddc2264ca3b14af479a89ae46db2c5184ed602371e569b1b718e42d05b9e5a894673a3a41e3ab42a0f0c80ba1eb46bf3ec5dd47469b12a520fb6d","ssdeep":"1536:CbD42abRhULOaeTLYj7JJ+oXTMdYErYQAFed:CbT6UCaUL0NJ+oXTMdYEr8wd","tlshash":"1e7373c4ff5c752641bbd02d682fa0caf27d50329a458cf2bfac542c2fd454912ade69","first_seen":"2026-04-30T01:39:48.56248Z","last_seen":"2026-09-24T10:05:31.284439Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2018/03/studio-swit-www_4.jpg","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.320Z","timestamp":1790244254320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/studio-swit-www_4.jpg HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://studioswit.live/\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a400f6bd8dc5dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"f09cb-5aacf2cf-7f6d0b15341d6144;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Sat, 17 Mar 2018 10:49:51 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gKRwd376yRZuXXQcTlUrGSVYPPIh6cR52G188KLDZ8BIsv5Xv68pqFwLy0Y30%2B4CooGMuKP2T8ji7F4mIr64Z030%2FTwkvcXIKt%2F8UGmFJxW3EM1Drt%2BjH6SQPgstwj6ac9E%3D\"}]}\r\ncontent-length: 985547\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":985547,"size_decoded":986369,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=3489, bps=194, PhotometricInterpretation=RGB, manufacturer=Canon, model=Canon EOS 6D, orientation=upper-left, width=5234], baseline, precision 8, 1920x1280, components 3","md5":"3ea5a3a70adfb1ce63a56a37b27b5f7e","sha1":"0cfb1f34d7807aa06d5c5d70d89fb3f25d4a0695","sha256":"8cd11149146d7c69d1ad93a80bbf67a5ac5bc029e0661db7fd4fee40c65c06fd","sha512":"f38585db413fa696f0a9eab0f7ba2cb5743d4107df6d0d5a45570acaac44db0cb99364f5755af4a6e4022059659324905e6aaddc7fb3ed7446db97a1d5b55608","ssdeep":"24576:Mt26ra+iE9XRvNwf+MQqE4TI8mvFeaqAg6:cBra+iE9ZNSQqE4rGFeXp6","tlshash":"60251298e8228f23fd943939f32abaad9632473f0546424e7e1d2c83b75419df54e09d","first_seen":"2026-09-24T09:40:04.58111Z","last_seen":"2026-09-24T10:05:31.28502Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.6.3","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.684Z","timestamp":1790244254684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.6.3 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHVCkmdRS4PRreWLlx5gkepCyfAYrp43yWpa3etl%2Fs7qDjbMH%2FhkLYOgO7VraM4njFqsL3tjSMeY5wFhE1uhWBKOXGWDjFGbwROdfTVargUXOGRqhgpMGBPGpLSg9NIGTHM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bfce13dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29401,"size_decoded":8308,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29149), with CRLF line terminators","md5":"8cc105dfeffdc03367dcbe7ea3ef264a","sha1":"9aa2e656e163d9a3ea622b4897974884583e4cac","sha256":"80a9123891e91ebbb1c06a2d2c79533155a8f17c51ac09013efa57bc007f303a","sha512":"bd11bf18cac33ab7a76618c84aedbaf123d050b4f9bbeedf5ba560e81b514a7e169f95d89afeebe3a28227ed453ae0f8afd43d774be2d3e59b88c31b27cfe08a","ssdeep":"384:Ky1KpMxWR1zy40Islk/4EfoXdOM8w706DvCQ41b0zouFwhq1Tdo+2sb3AB8kNv1A:KsIslkQEfoXdOM8w7HvfzoiHRBm4","tlshash":"a8d2ebebaa265c6290532142c3a54d192168ce36fd32aeda33d6d0f506c305d37fafd6","first_seen":"2023-03-07T01:03:16Z","last_seen":"2026-09-24T10:05:31.285737Z","times_seen":1742,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.6.3","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.928Z","timestamp":1790244253928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.6.3 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8uJiyHTR%2FyyhAPzhF5RmXrVQfSNnwgV0jeuhw%2FPsGQcKennSZVcBujKVgD1wHQnhBDPE00if1sH8RtjzO5CG4oUV%2FkpucWaWBPrXREe9JaWCc2F0e0NZoYw7VxRGUdZuk7U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a400f6bb0d31dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110563,"size_decoded":40879,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27287), with CRLF line terminators","md5":"a748a9e56b2c639013c770506f1fd529","sha1":"537edd9b364ac005df2d1c57be873945b2fecdf6","sha256":"6eabb193731278713f4208ea84b8c7334c3dfc98f01cb074778280e1df536e62","sha512":"ade8062894443994d5dc96497426dde1e238adfb9600aab7b3713ce804934aca5e12ae3267d961268ac8a146bd06754aa110006964af95e9394dfb1ea5b825b8","ssdeep":"1536:iQpnayKBPfF5aknBDU0KsIu5XOKvITONqvUejr3P99cN7H98rYx5s14/gCsBMXw7:iJfFYoDU0xVqvUejbs7dCYdInBwD0a+","tlshash":"96b329ca35517022859622a5517f0643723bdcbab4098d3cf548d9ed3e2cc8921bffba","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-09-24T10:05:31.286373Z","times_seen":5369,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2017/12/LOGO.png","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.005Z","timestamp":1790244254005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2017/12/LOGO.png HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a400f6bb8d58dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"15a0f-5a25de42-b375abffb53245c3;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Mon, 04 Dec 2017 23:46:10 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3m61KUJX7tHzDoP4EOR7GNAS1cwUrk6IfYwJUYmz7fYen7uNmrvNLxJIp08vfK30Ht4UoTdA3GRdnJjhnn%2BoQZ8023IRG8dlKc1GWegFmLhR65SVeDEgEO0D%2F7wpo6Y9dag%3D\"}]}\r\ncontent-length: 88591\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":88591,"size_decoded":89407,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"83959e1a7780a95802547029758bf4a4","sha1":"a9c9bb4ebbf5f485fdad1c71ac38f51f498b2755","sha256":"d45a84aa5842b2aa9dc6e7fe321b454d2a819cb00d045b7e3ffeb3efa949b762","sha512":"0d0c6b096765752a06568d87ea2501c9dc21e61f0a5c262adc14a0acf538f9972e624d545c781e3ba3bf863a8d417267b149a5441c64f4143bb14635dedc2005","ssdeep":"768:S35JuSbJdfY3IlCQxzgSBehrYi2QRlGe02HPA9c349E2HfRMdt6:y5bJZbCQxzNBe3drpUE2/udt6","tlshash":"9883b4637ff61961c21ce2a552c438883dc7368bd5f02e8bface4e90ef5861444cb64a","first_seen":"2026-09-24T10:05:31.286949Z","last_seen":"2026-09-24T10:05:31.286949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/fonts/mfn-icons.woff?23391439","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.629Z","timestamp":1790244254629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/fonts/mfn-icons.woff?23391439 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/wp-content/themes/betheme/css/base.css?ver=20.7.2.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: application/x-font-woff\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bf6e07dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: max-age=14400\r\netag: \"13afc-5a0c7244-68bfbc3588d3a7ec;;;\"\r\nlast-modified: Wed, 15 Nov 2017 16:58:44 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QDuucWe4in7%2But0EmRB5MI6IQfEsxzXWIonzWJqqZsNU%2FSU4ibvcCQj4gWkxy0ik4IO%2BPQRocqhLyKEDUop5PInVpilCAk5CPBhR31tkhPmX0SksI90ey1vuLJVbh10U1Bs%3D\"}]}\r\ncontent-length: 80636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80636,"size_decoded":81422,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, TrueType, length 80636, version 1.0","md5":"3da843d15ed5d4d39e269cfbad8345fb","sha1":"1d915a3fd051f9e9cf6f545dfe31939fdb368738","sha256":"f6134456d89988ada75cfdf21df40c6abdccccf01b48a669add0223f3fa38ec4","sha512":"bd20900c08f535109c2549a420c7f142572399ce85343c73ef5c092432a6110361c393536a9f92a0650038a9a3c1e26b92535a1a3a2761cb4fb6a766751f0968","ssdeep":"1536:Zc4VAGE5tUoq8aq/eFHCmx4FXeYQ3RrFkeJn8tTt94UOZUuaEK+Z0v:Zl6r5tUhJq2FHCvFXeZFkeFQcZUqE","tlshash":"c0730266bb308154a95d54259a0ccc38e09c6c4bf3df6bf4641b993809ef03a1b9a74f","first_seen":"2023-04-07T19:01:52Z","last_seen":"2026-09-24T10:05:31.288003Z","times_seen":1053,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/66/6c/map.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.692Z","timestamp":1790244254692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:09 GMT","end":"Fri, 27 Nov 2026 08:06:08 GMT"},"fingerprint":{"sha1":"6B:DD:9E:90:A1:B8:0E:F7:83:1D:3D:17:DB:A5:85:98:F2:E5:07:8C","sha256":"99:41:52:4A:38:1D:4C:B3:19:1D:AD:0C:91:83:B5:70:FB:2C:08:37:01:B5:0D:75:CF:2D:88:E1:5D:C5:A2:7C"}}},"request":{"raw":"GET /maps-api-v3/api/js/66/6c/map.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25849\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 22 Sep 2026 18:46:06 GMT\r\nexpires: Wed, 22 Sep 2027 18:46:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 22 Sep 2026 08:19:36 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 141488\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81283,"size_decoded":26688,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3353)","md5":"923cfaeffa8d1b1c80b2ef90b82fa606","sha1":"b5f8ba1ae8e9e2f2ec18b64ae2707efc8ddf38b2","sha256":"7dcebb63a808976d2b1b5d27c8acc987cb8c4c66fbe9693fec825da3ed46e10b","sha512":"e61d2d51b25cf69826e849881856b76ff05eed921a0100652006dfa724a8d827d4ebbe792f43ecb4d1aeb2f89e883bb7130a77ccdb9a3cbe1fa24ec87439b138","ssdeep":"1536:S4F6q1+U8mRcPT6M4YQLWOQSXElljcJyUZ4X4d5TawU1Wmx:S4F6qXsT6FYOySXElljcJyUiXo5Tav","tlshash":"778318a1322275f69bf5d4b4905b0203b065e445f00989bebd6cddda5aecc8b12feb31","first_seen":"2026-09-22T20:11:27.322499Z","last_seen":"2026-09-24T11:51:18.685818Z","times_seen":105,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-145380032-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.895Z","timestamp":1790244253895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=UA-145380032-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\nexpires: Thu, 24 Sep 2026 10:04:14 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 24 Sep 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 135040\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382112,"size_decoded":135690,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5086)","md5":"e3af32bd2b33c0606a8af67880929dbb","sha1":"3b65366a5dec10fe70ae9e6a58542ef10a267ddd","sha256":"43b4250a97d52a8be0f9d0a1896e22fc20603a550af70bf92e45d30705baa386","sha512":"2bc4a7f71c2ad5650f87450b8129cfb047379bd90f3ab15eeeb209264df8b6764c1ef8eafa2991d351d6514c2f2ed152a378a2e59d98adf07664dc6b4be62d72","ssdeep":"6144:jp1mivFwkl6ZRqsdcc1abxE/B3pd5ovLWrSH9G5m:6B46JoSrEJ","tlshash":"728419ccb3d6702283a3b574903f018bb27a6d92b84cc898f286d9d42e7465a5177f7d","first_seen":"2026-09-24T09:40:04.518468Z","last_seen":"2026-09-24T10:05:31.2891Z","times_seen":2,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":2,"connect":28,"send":0,"wait":33,"receive":46,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/LayerSlider/static/layerslider/js/layerslider.kreaturamedia.jquery.js?ver=6.6.2","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.925Z","timestamp":1790244253925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/LayerSlider/static/layerslider/js/layerslider.kreaturamedia.jquery.js?ver=6.6.2 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bfVz3e3TDzv2hCKI0eTqee%2BjVlJGxKvpGoiAJ6fFQfOxvnMOz7ftHW1jiWJGniprvikMixh7YnT9CQx5dQHRX1r%2BSCHHNL6DycGrQKDi4VQDZIBvk0o%2FSoNCRNwV4%2BUCGD0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a400f6bb0d2fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115576,"size_decoded":46678,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65335)","md5":"4810448131f955e40e93c662f546c865","sha1":"a898cf8d85de984eb08275fd471a3db7541cd4f2","sha256":"9197cefb4c4346a76c7de1307972f8c2c4ae6674528bdd36710a6d336fcf54cb","sha512":"2838f22701d38129cf6f46bd455c2c21b692044fb0ae89c3ccb9870eedea29a712507ec050f92613672965f12494fd78c07a698619d02cb1e98db0dd9b41b715","ssdeep":"3072:p0Hxi9LgMgGXsoa6nNaNdt/LpukzlzaEnQlsKG:fsoa6nNYdt/QilWBlsh","tlshash":"b2b32a2952049a3344dcc1d7328edf889eeb0cedda37de26f6d9ac6c288446dd193785","first_seen":"2023-03-14T18:57:02Z","last_seen":"2026-09-24T10:05:31.290407Z","times_seen":26,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.6.3","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.930Z","timestamp":1790244253930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.6.3 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Pyv74lf%2BzYGKa35Ox9QD7k%2BpqYiT1PUB3GDTTG7%2B0mr2LgW1F53%2BjrNXm0YFhl3xamYhWRwyLmkaHTjMVkPEiMfLejRPA50NC7LYSXMi20jJc6I%2BUx%2BO47c6AdpcLmAN6k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a400f6bb1d32dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64792,"size_decoded":19896,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64455), with CRLF line terminators","md5":"ea632fb18aac2217265de8d583284476","sha1":"ea93c8af55049ccc41a02878b9c40303b317423f","sha256":"5c66c3c106dc8c518f76ddf6921166fbbbd755b7c5586adc4f9171db0a7eb3df","sha512":"570be4330067be35a7dab9a371a2d53372a8b75b11cd2db2557a53d96ea0e35c833d2675dc8198a5998396c98316aa4c28dc504caeeefd41511f808209b0daa1","ssdeep":"1536:cCnzw4t1e4eYpkDE6+3YZdpEaUH/qj6rSPKi1OdU+jIX7D6QIA7H8u5TXpLp:cCnzXnnkDRPK4X7uQpHHpLp","tlshash":"ca53e864be10647644fb7265e03e8514b2b16d3aa703c090f2a7a87c6aecd85235ffdc","first_seen":"2023-03-07T01:03:16Z","last_seen":"2026-09-24T10:05:31.290948Z","times_seen":620,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.944Z","timestamp":1790244253944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qAZaxupRI0QD31ZFjWMX9Z9ydBpHKFRnqoe8GQWkfjbLGr1idzu6lKcbPH5%2FLokpQbgi2ePLdk00eoc11xb5rWjoHtPY9zuVn%2Bq7OeL0VWEwEVzkpEE6AClJW6CAThnHH0o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb2d3bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3148,"size_decoded":1717,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2933)","md5":"82835a8960ddd73020389dbfa45c39a0","sha1":"a54b01fc7de31d8068f61177d840125bb9ce011e","sha256":"88b0379349a4dda6ebcc43c5bd12084d230c6105a6fd3c2f651c4e771b3eabef","sha512":"c69039ea3a9c653fe627b5293a4f68d8e84ec374c9bf68629cc1195c7ffcd84dcd5e446823df850bf0fb0f9a4255b2a4ba942999b950142513bcadbc17e803f1","ssdeep":"","tlshash":"b75197c932646d8341931736d27bdb477d3190d9a44ad52cbb38acec3a2c43860b6abc","first_seen":"2023-03-07T12:04:29Z","last_seen":"2026-09-24T10:05:31.291452Z","times_seen":637,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/wp-embed.min.js?ver=4.9.13","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.964Z","timestamp":1790244253964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js?ver=4.9.13 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tDAR6zPFEeNy5p4xnoRMWYoSNhHsm4A78h9xW0nNme5segekWVxd7lWVZsoVJtWNOvOTYe5BcYTAdTQKaBkvB0QA8qnzBeUGwijkDwE%2FU%2FK7CizfUHAXrjKemkopZmLMmC0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb5d54dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1403,"size_decoded":1370,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1403), with no line terminators","md5":"2dce40d16f9ff6332d3cbb7ae488a2b9","sha1":"0a8eca5975f21a9f1bc079d111ca1657009dbe8f","sha256":"2152557cac69e2bd7d6debef5037a9f554f9209cc305b8141b3329acb10c42b7","sha512":"8c5cafbc2ce3705735ff1131ab34c2aef7aa50bf25ba13f0a29c07713561b0e6522c93596c8047ec332e7fa98565a9de56cf040632149b255b58d0bbc43fba7b","ssdeep":"","tlshash":"7921441a3338143b10db11e3b99d74c7d6f207ee240121d28d78c880fa94fa39966fc5","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-09-24T10:05:31.292213Z","times_seen":3570,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-JGTVB5RY02\u0026cid=57534615.1790244255\u0026gtm=45je69m1v9117246887za20gxf1\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938465~115938468~118897920~118897930~120213116~120385423~120469145~120469153\u0026z=247738638","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:15.102Z","timestamp":1790244255102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:25:08 GMT","end":"Thu, 03 Dec 2026 19:25:07 GMT"},"fingerprint":{"sha1":"FC:E7:07:88:73:73:DF:54:C0:46:86:13:F6:7A:96:CA:CF:F0:06:55","sha256":"3F:90:16:A5:E6:72:E1:7F:CE:8A:51:8E:F2:2B:59:12:4A:96:69:BF:B3:6E:9D:6B:E2:62:0C:5F:4E:71:BD:6C"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-JGTVB5RY02\u0026cid=57534615.1790244255\u0026gtm=45je69m1v9117246887za20gxf1\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938465~115938468~118897920~118897930~120213116~120385423~120469145~120469153\u0026z=247738638 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 24 Sep 2026 10:04:15 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-24T12:26:27.003824Z","times_seen":1076781,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":38,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato%3A1%2C300%2C400%2C400italic%2C700%2C700italic\u0026ver=4.9.13","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.920Z","timestamp":1790244253920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Lato%3A1%2C300%2C400%2C400italic%2C700%2C700italic\u0026ver=4.9.13 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 24 Sep 2026 10:04:14 GMT\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3904,"size_decoded":1177,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd78cdb1951aad174fa1504628957e3d","sha1":"c8ded8496c250ecea85088f92b9023c98c0b3dda","sha256":"423f8ea0cac139df24a6886b26b9543b8881af804176f950a40fe6c0fc28d175","sha512":"147a0826ec6d6087561bcb891687c76d8d4052945fcfca5aebfdb494eea1df175ca5b37f16c07e07cb26ad8d51bf0614eb414d372241a76aa50ef7bb4ae4149c","ssdeep":"","tlshash":"c781a092096fb508db930dc212da7d32ef0fa25064459835eeff14d8bc97d6a9361b0d","first_seen":"2025-09-20T09:35:38.888097Z","last_seen":"2026-09-24T10:05:31.293163Z","times_seen":325,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":2,"connect":29,"send":0,"wait":47,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.941Z","timestamp":1790244253941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YEUATFdgpIM%2FDYTdZjYR8ZBzjTN2NT2cZQ1i%2BZsUMGuh13U9WyVh7c8nFQZEbCG6gNsR4xWynDFjrVZNHQ%2BWuJRc1J2hW%2B9Dm9uVlwKG4mVEhzMbjSBKh4O4LjsLqZO8mNg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb2d38dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4000,"size_decoded":2515,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3775)","md5":"9ce4e157448487d4efe0ca538f656a71","sha1":"45d22de723a97ca19cddd4fb792e339b5fab5c50","sha256":"936567bc744e199e02bfc3c33fe2bc9c862999e0d479e2a694aa7485460a3960","sha512":"a28ea8c489ee99b0127217429933b84a07cd0b53e4a566754d7bb3e6c762bf7909052cee4de5ef3fcd1f8263ca88c2821a7590cd7cb3a1bdb54599c79c6ab5ae","ssdeep":"","tlshash":"c18163ecf1837420c3eb3b75507f594bb2bba896194d0468b09884d46db2e19907bf7d","first_seen":"2023-03-07T01:31:36Z","last_seen":"2026-09-24T10:05:31.293662Z","times_seen":1992,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2017/11/broncolor.png","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.314Z","timestamp":1790244254314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2017/11/broncolor.png HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://studioswit.live/\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a400f6bd7dbadfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"5665-5a174db0-e5ecb284624637fe;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Thu, 23 Nov 2017 22:37:36 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QwNP9ARDK1slu9cMsE0i5oLBDtSDqLFzPg8abETdnirBi80CQmBUXA%2BGniaNB1ROyrQUahRMtMjdvIiRgmF49m83FKSx3qAE6xVpf%2BXr18Q%2FYEuEKBShtWriwzHaN7SAkjU%3D\"}]}\r\ncontent-length: 22117\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22117,"size_decoded":22934,"mime_type":"image/png","magic":"PNG image data, 200 x 100, 8-bit/color RGBA, non-interlaced","md5":"88e5fb328b79db9334a86c5cf48f5adf","sha1":"2334aa247e86fa831a7da664c18d782e35844013","sha256":"aff3a182a9f8668ea97fa27ac61e20858d0229cb2be7818b98fb1961278625a2","sha512":"a4aad7878da57cc0aa4e9d7f84256fb686c3ddaaba04bde87a5d206eb5f88b9b6148e21049f3d5991cb3213f2ea27b51307b7c6a39388ec57477494d1a5767f2","ssdeep":"192:wSSktE/UNOlZYa1q23iSd61Pj4T4bH6P1VpjEepYRIx:XRtEsQZYTJZhMPpjKRE","tlshash":"0ea25c38f9f270995057da702de425859cb30b43ca525c847aaf9de7af117ee8c9f280","first_seen":"2026-09-24T09:40:04.522367Z","last_seen":"2026-09-24T10:05:31.2942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.555Z","timestamp":1790244254555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://studioswit.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:30 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nage: 238304\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":24393,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-24T12:29:27.239647Z","times_seen":269916,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":3,"connect":44,"send":0,"wait":28,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2017/12/studio-swit.jpg","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.863Z","timestamp":1790244254863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2017/12/studio-swit.jpg HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a400f6c0ee3cdfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"682d5-5a28354c-bb841debed7130f1;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:53 GMT\r\nlast-modified: Wed, 06 Dec 2017 18:22:04 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FpiE3fBu5JHS%2BIPDXR9kSu4PH5udpsIeAPzbFsai4GGv6%2BdW3FKwhEceEMFqpvRP0fAycj6d1PWYQmg4Tfn2TUo59KzZwaEqCunfFEUOyugtobIo9gOAkJCdRzDoRov5iJ4%3D\"}]}\r\ncontent-length: 426709\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":426709,"size_decoded":427527,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=3635, bps=182, PhotometricInterpretation=RGB, manufacturer=Canon, model=Canon EOS 6D, orientation=upper-left, width=5453], baseline, precision 8, 1920x1000, components 3","md5":"fb0ea9304e2843072f1b7ed272a6a425","sha1":"5797578e7cec6509fd8228507b19da5841c03d86","sha256":"ddfd6cd1d747f12df4792cb99263c7d208f72a8289ebd04f62a2d26987c9acb0","sha512":"f6717a035823dc5f57679971d2d895b920c91348a70a9ced208204919eb76cb05e1638c2dcf4ddb9576424fccf807b5ed39fe768c5b1f5fd85c32a1b968a89b1","ssdeep":"6144:GFRTANlaCCUSInpfXWsmA6t2cfV8pZMf6IF9BcHTKN/HFxcy0E5h:GFKVPSInBzmA6nfVU1AczKNHh","tlshash":"489401b5f80942a2e3342d32b185714d3341d65edd729b81705d9e28ffb0aee158e8ee","first_seen":"2026-09-24T09:40:04.507989Z","last_seen":"2026-09-24T10:05:31.295289Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-24T10:04:12.077Z","timestamp":1790244252077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=klcwd%2FfLUkIts9X7ojcD%2BCHGfvDwhajjffNnrj0dXyE%2F0XUYOS6X0sKHdihfmrDkoT9OvAZn4snbt4JgFaf7Ed1Prc58x33Sb6qqKPE9ItrUErot5jL0WdY7A%2BB%2FQ2spINY%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a400f6b00b1ddfec-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlink: \u003chttps://studioswit.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://studioswit.com/\u003e; rel=shortlink\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Slider Revolution:5.4.6.3","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"BeTheme:20.7.2.1","description":"BeTheme is a collection of WordPress themes developed by Muffin Group.","website":"https://www.betheme.com","common_platform_enumeration":"","icon":"BeTheme.svg","categories":["WordPress themes"]},{"name":"Contact Form 7:4.9.1","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]},{"name":"jQuery Migrate:1.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:4.9.13","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":116740,"size_decoded":25542,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51726), with CRLF, LF line terminators","md5":"e587e69609ea4175f88667644d8b7e0e","sha1":"c473b78dc133dfe2f6e6e82692b2118c6d27eccc","sha256":"c704f0135d4156da3c906d527b3477b96ba640c6958d5111cfe3f49a35198663","sha512":"4f5d2a409854f7d53d099e949cebbc9b09bfb4a162f7305f12968796cda2b8cfab0e29f56ecd52b55c33263ac7838cf5a8ea5404f3bc639e2e66a172cbbc9dd7","ssdeep":"3072:CIJZVGiGC68ie1SyhMoHqo4y8OTup/nKtNWspGTUv7/M3hdZgSiBaj:H91SyGoHqo4y8OTup/nENWt","tlshash":"3bb3eb33e5017416123344a6f2b3af7df6b1a215c386c9a4b9fc817e47c5a864e636ce","first_seen":"2026-09-24T10:05:31.295894Z","last_seen":"2026-09-24T10:05:31.295894Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1374,"timings":{"blocked":0,"dns":60,"connect":21,"send":0,"wait":1293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/style.css?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.906Z","timestamp":1790244253906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/style.css?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5o1Zjypj8V%2BDY7xYWO4QAri02wMi0DRX%2FRWYMg%2By2WaKD7RPVF1oR376bFQozhqOS8KoVzeuDZcMSYygW7NpIxILuLx2iidM%2FXzBqWl3VFamAlMJarCSxELAIqEoDMS%2BgxQ%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a400f6baed20dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"120-5a0c7246-3685438d4da91e6f;br\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 15 Nov 2017 16:58:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":288,"size_decoded":1009,"mime_type":"text/css","magic":"ASCII text","md5":"10c5597df24db9d0070c9a6a7160afd1","sha1":"020faa632bffc79e84f80714d1aa8f7dc5c69e3d","sha256":"228830ad6a591547d72999f92c77047de3b8ab86698f5b079c8f276ef8884a85","sha512":"0e3f1f657551b9a2b4def54074572ca370094e6af451ff4f923c051b9d2dfd03baaacc5b0073e127cd3944ac3862219269b16ba7957f9e363c72ee023aed52c9","ssdeep":"","tlshash":"3ed0c2853d4e4589d5fa42da3db12b47eba4ff44a0d9cc40d88b0908233225710f0229","first_seen":"2026-04-30T01:39:48.605825Z","last_seen":"2026-09-24T10:05:31.296906Z","times_seen":4,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/css/base.css?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.908Z","timestamp":1790244253908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/css/base.css?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AkH5MdFYZU4lFUeEbcqT4qOYslWygkM175MIyFbLi1KcFP36IWNqOGanQ1JLVzQ%2BLrr7iHV0syXKLtqUNdoTBWfOo2AYkqNhwOC1qQX4CrQ8PwBRdrlpcDLAoBeKRVf6YFY%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a400f6baed21dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"e17e-5a0c7246-19e6bcd07265c76e;br\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 15 Nov 2017 16:58:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":57726,"size_decoded":12415,"mime_type":"text/css","magic":"ASCII text, with very long lines (2051)","md5":"28b08c47914bf0d3c01b5b4bdfaefd55","sha1":"cd2e110123bdb84b45747c1881a9b753577aa234","sha256":"8f3c7daffc7c756f5c11783deb59b7a49db1f3271ebeab71d7a65d571c508fe0","sha512":"d114ed37699f1230ac977425c3ee2ffb2ed62eae56f3bdccba3f03b8d6b58c7652c809cd248d8d6f6382aaae9524ab51422fbc858b83013177195c7d46e025f9","ssdeep":"768:e/pO63bDwtcsxZfNJV7m/JqfPXQjDCohjg2wQedGITltihRK:s6xZ1iiQCa3LaEs","tlshash":"b4432ff1dd4822dc63b2c00293c2735efd14b020ea9a7d57f44b74ec4bd925616aeb6a","first_seen":"2023-05-10T10:08:57Z","last_seen":"2026-09-24T10:05:31.297561Z","times_seen":45,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/css/layout.css?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.910Z","timestamp":1790244253910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/css/layout.css?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6%2BOvLH%2FF7sk0q57gs5DezUwOVmbVc0Yzfr0Jr4zqNJYUqS%2F9C%2BsF2pBI%2BuJJftN5f4yfmqCN%2Bh42P9Tr20tA237QZ90BcwKnzlrgXbTZ68LyK5IAe3%2FHDLDVSGY%2BoWEMsk%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a400f6baed22dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"1c71f-5a0c7246-76eee4a5b56172f0;br\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 15 Nov 2017 16:58:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116511,"size_decoded":19572,"mime_type":"text/css","magic":"ASCII text, with very long lines (401)","md5":"34a10622d704662abb9127412ea5ccb9","sha1":"5fecc75cbe3946f4ca91d8ef5787fea0c2ca1d50","sha256":"87cbf7e6c24368a60dc444608737ca5c814d854f9fb2c655ae018e0e70c48e74","sha512":"3bc38db1ee812921e029ee535b27cb64f30413b112080d17fdd99409b9dad782c0e61a726286e269be29ad15d590eca20bc00654bed76caefe80d784e9f5b779","ssdeep":"1536:eWezYtMKCM9X6++Rvxxr5ELOX4FuRzS7fNk2bg6t/rqe:IBsT/rqe","tlshash":"9fb309216d323908617bd22ef9da297ced387123e3534d9fe918922a8b4778d097f548","first_seen":"2023-05-18T14:46:03Z","last_seen":"2026-09-24T10:05:31.298539Z","times_seen":40,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/LayerSlider/static/layerslider/js/layerslider.transitions.js?ver=6.6.2","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.927Z","timestamp":1790244253927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/LayerSlider/static/layerslider/js/layerslider.transitions.js?ver=6.6.2 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uDuv6oD2GtWEraYkqhK7zg3%2Fe5Qj3faD9ZFMkN7j%2BvlPJ%2FYKxzL%2Bal3Anonv4BwOaZq08L3y46JbynFQBeQjuBSXP8IZd%2BZgu4Yhrf54Ui804cKG1X9OyNKpT5KPfEF5WbA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a400f6bb0d30dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23831,"size_decoded":4294,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23514)","md5":"ab5c641341135bae9cde257a14da0656","sha1":"386804e789461da7b84d5e6e180ae87e67276dc8","sha256":"7f612443943aaf092378e9fa4082d03bb33e0a4430b19f51fe16077e66729db3","sha512":"b3da4d1dfaee046ed348fe4120dbce4acac412eac5af1234036adcc2d5b6181bb53b805ecba5e8b9b93a43354773542fc1aeb449b81208de8fdad6ae589f6e92","ssdeep":"192:bQcANIXhA3snO6Zhpvi9JarYd5f/GEUVrasa7EoJglLs89CPjkoY6JtiKWh4SPcD:7sO8l92LMXUcFsp53AoXJu","tlshash":"96b28b5f0658ca7b5235d0baf650474f3a57a811b1be04ed227cfa9b324163a8fe1ed0","first_seen":"2023-03-07T01:07:48Z","last_seen":"2026-09-24T10:05:31.299589Z","times_seen":984,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/ui/sortable.min.js?ver=1.11.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.945Z","timestamp":1790244253945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/sortable.min.js?ver=1.11.4 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MjGkZYpzyZnUtzG04kvZatoMA9CDqsTwr9jgJr53kV6qpQywk4nRoRtwrwbna7ojckk6zrzSEoOQ20%2FoJiZsMieKZzNJ5DGjZmeg2p1ArutGMPCUQYApu%2BOqJTfqEZo8PMY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb3d3ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24899,"size_decoded":7857,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24678)","md5":"2896e90cc17e9abc160ed96bb86b07e3","sha1":"429499906351dea7dca03652f040eda029e5f159","sha256":"9023e3275b6d897b202ddb9848872a661fea055c96c2973a02e1cf5e39f04afd","sha512":"e103140e1fa141f5d479e772435e255e66d36cd05d145a8bf4de1d72643c0f37a17aa68569cc40bde4b6d685548377f387305a08d2a5a0fb40b49ac7c7eff357","ssdeep":"384:UHKUkojUUBog4kd9V2EpWXKLlxGdRJoMK+nIvHYpYmIt2AsYWvNk63uixQz:ryJBoghdeXQGhlaHSAkAsXez","tlshash":"56b2855eb6102236c18bd61c586a171d633bf11bf700c8bc757c8deea91de69107bab8","first_seen":"2023-03-07T12:04:29Z","last_seen":"2026-09-24T10:05:31.300238Z","times_seen":328,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/assets/animations/animations.min.js?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.954Z","timestamp":1790244253954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/assets/animations/animations.min.js?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EVOuGg2aVI9TvqAnax4F6GWfuDkI%2BT7nzp771mCWRzKJhyjNoAtgJpXhrR%2BWfTouCiYJPD7PEI%2BW5KyWuxAklXzwPlA8uCl7YHeqNq%2B1xIUpuhlPG8gahfY0jKBrh0%2BjLvY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb3d42dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1896,"size_decoded":1259,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1723)","md5":"ecd2988783bb4e49f6a242620d54ac21","sha1":"6863076f3f4c1d0203e511258703af9f02fc97a7","sha256":"20fbf71645de91c6368d758f878b980c72bce11166a26902bc3e9625eac51833","sha512":"4778fc6084a1aebfe76da092c485e1451ff50bb2fb9b57ca4657b4bbe821c194b1bd39f0e8bf7b947e320661c4a7f46231a9c0e9ee95d2816e7809ea037f9899","ssdeep":"","tlshash":"6a41ae4a3a8104ea02bf16b2f4bf131435a7663cf676056870b8b4587824f9c77779be","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-09-24T10:05:31.300823Z","times_seen":2057,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/css/responsive.css?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.918Z","timestamp":1790244253918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/css/responsive.css?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2FhaiupNzQqcPJB7rj5SfWTRq%2BPY82FaQQ1GgSTzXVqle5QpnoItnfIkVH2XN%2BoHsBjGBn9uEpBnx%2BkbBhrQupTLftR4bZzDWph31jvgcSjXHFLPKv50tqWmst%2F6yqBpsYo%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a400f6bafd28dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"da31-5a0c7246-310f3c01a2474152;br\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 15 Nov 2017 16:58:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55857,"size_decoded":10290,"mime_type":"text/css","magic":"ASCII text, with very long lines (612)","md5":"720994b5dca80bce6a3aeafeb08ee053","sha1":"33e7dc70cbba04f209d5dabafd647baa2e1aab75","sha256":"02c6e61ee8f30185093027a257f1854792d66fc61dec0841ca69d4cc41aa2a18","sha512":"a6b873060aee7144f8c2cf456284c583f48f8710021c344836117ec2db88362fca954d11883ea5b14db6c268f3358fbe2c88334a3a3f88067affd079f8480303","ssdeep":"768:YDCONaUrB8OpatS9hWkXuAfmZVpMzxd+HeY7lEpVi5qTy5ZnlToH5wXJZC8y5ydV:zOpatS9hWEwZVpMzxUWVixj1y5ORx","tlshash":"8f43b702dd62390d2267d51efae639b9fd787027d312889be904923f8fc668e45fd058","first_seen":"2023-10-27T01:46:43Z","last_seen":"2026-09-24T10:05:31.301367Z","times_seen":14,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2023/03/ikona4-e1679354164369.png","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.022Z","timestamp":1790244254022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/ikona4-e1679354164369.png HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a400f6bbad5fdfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"9eb-6418e934-f967c7339144b38f;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Mon, 20 Mar 2023 23:16:04 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=igm0KvKXOJ2dZQ4%2Fw%2Fw0IqRd1fzyOpqM0eexpQ66R5Ibk2dfyFEeqM1eMzief9iNqTL1oNqOoYrxreQJmiBDPPt%2Fr7hUNF9e1dxVSDbNgMntjkvm8x%2BPE%2FgVhU%2Fc6uCwqzc%3D\"}]}\r\ncontent-length: 2539\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2539,"size_decoded":3360,"mime_type":"image/png","magic":"PNG image data, 93 x 75, 8-bit/color RGBA, non-interlaced","md5":"981f2e105b3fe9d819ac2521093db0e9","sha1":"45bdc3663e8423c0db223ad48390dc748d5574a9","sha256":"e6b9e4419d38ef0e3c14971eb0f23e36f8ca0c3203bd78390898b7339b617f93","sha512":"4bcdbc6d0c6cec802b55706b6db1d15f6eef1a5b328ff1d3de5638ae6dc5ea21a9f3afd1eb2e03415106775b3d2052371c7164fa1cadfdb9098e94c3fd29279b","ssdeep":"","tlshash":"e2511a09b997f0defecf690035789d5de909b2a080999092b0895c06f613cdec2d796c","first_seen":"2026-09-24T09:40:04.574637Z","last_seen":"2026-09-24T10:05:31.301957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2023/03/ikona5-e1679354045759.png","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.023Z","timestamp":1790244254023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/ikona5-e1679354045759.png HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a400f6bbad60dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"b9d-6418e8bd-241140c07ed72446;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Mon, 20 Mar 2023 23:14:05 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xU0stCticj7OpctJIdrDY8o8IRMOIqBTWpOscd9UKYEyKNwErZBx5kF2940LnTMKvCPVDP2RvUWLdJoJfjZZNDypC33w9DtKY%2B7N8VGcGCmbyz%2FnJNGAnDzofgg7CXQth8c%3D\"}]}\r\ncontent-length: 2973\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2973,"size_decoded":3786,"mime_type":"image/png","magic":"PNG image data, 113 x 75, 8-bit/color RGBA, non-interlaced","md5":"d7d84bc89a39316b3aa9429c53a27445","sha1":"043a24001de9812c6aac119418f9b6951891b8ce","sha256":"3d34c99f0829902feac9a7991c8ccb4dfd46773a3dc0d6bf88f393459e726cce","sha512":"7b486adbbd955fe72d4d83e3f03af7130ff0de8b15120a02c7c812dfcf22c9185e6bc21ae05d0269892f2dac3a48370c50670dd247297e7f3a8c7b01a86a478e","ssdeep":"","tlshash":"a8515b8b36448375cd137e3d83ab0a97f83013ba1138a0413af1d5233748bd8ac6a35d","first_seen":"2026-09-24T09:40:04.545807Z","last_seen":"2026-09-24T10:05:31.302612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2017/11/apple.png","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.318Z","timestamp":1790244254318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2017/11/apple.png HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://studioswit.live/\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a400f6bd8dc2dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"4795-5a174de8-bc876b7e7efb154;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Thu, 23 Nov 2017 22:38:32 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tmVVkrB1Gcla8p22XPFdk4bftZO9FKpYyQbD2SrYWPwmFkOIsjP14dilugTqazXIqiSoE9nRbX%2BD%2FHxniS3ab2urJU%2F%2BnMe8tDUqvqHhaRxO6vKXgNy11Xb6OPtCRjvBJnk%3D\"}]}\r\ncontent-length: 18325\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":18325,"size_decoded":19143,"mime_type":"image/png","magic":"PNG image data, 200 x 100, 8-bit/color RGBA, non-interlaced","md5":"8368d824ecb8af0cc50136e525b05ec9","sha1":"15ec1bfebb0f6cbef6f98115541505d2a62cab5c","sha256":"76a999d28ca4e51ed7b1b8f451cd2ef1c7066cff0a360199fb996d942bbae3ed","sha512":"b2df859bf965840249c7584c820276f54b6659e89a0f72fa07ac9d2a55e1ad089557a6070b9b37a007a9d16bafa0ea02e692c10b1b80da88a811bc4491a512a3","ssdeep":"96:wSHkEWRuxNXrNGDa4GoFLV0tsc5ewDv5e7+9RQkfDyLPQaMGX+y29Ob8JZ2JcZ:wSHkt05/A1V0TDwq9RXDylOnaj6","tlshash":"9882c524fcf171e8908aa67138e926049c6346cbda905d45bace5c272f11b8d9d6f6c3","first_seen":"2026-09-24T09:40:04.534366Z","last_seen":"2026-09-24T10:05:31.303163Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/LayerSlider/static/layerslider/js/greensock.js?ver=1.19.0","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.921Z","timestamp":1790244253921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/LayerSlider/static/layerslider/js/greensock.js?ver=1.19.0 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T38vqltWe7yDfayZdQ6i362CUqtHo6GJzH33gBjakH%2FLODzJVC1FEAqK%2Bi9dl2TodC9uE1SQ1pLoN7WpkrcncD0MliSInBBXL3hyY2apumzjcVYzh0r6TcE2vdeBYxyK0PU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a400f6bb0d2bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117557,"size_decoded":41976,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32006)","md5":"150324e55a09a90e1eface0a7faed270","sha1":"0fe9f52c3c351c06f5cdb80f86d1aa70a52c4140","sha256":"dfc519eb2d0e5ac0e8cdbe86fef355135280c643df14fa9a8e6abd5820d01159","sha512":"1efd29ad79905eca538e23b39d38f8da043f7d7b050e395f146e841a92551c940a3e9f09388fec0f59fb06108f444a62b17540604c66090c63d6c0e003cf1b26","ssdeep":"1536:S56fJZjIbDJjzglHP0VH4dLk2IrVpcXIKXkPxbnNku87CWWCut+7u5zOYIn8UGBa:SBZkFjGXgojNICWWCuq1nyhW","tlshash":"1db3f8c63222601244972196597f0a477337d8eaf4498e2cf588c9de3e1dd8922bff76","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-09-24T11:03:14.543607Z","times_seen":3034,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.955Z","timestamp":1790244253955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mthp38fmbnsaHz916vhcsxx6Tb1o7WXGjekQgIef4BF5ClcnkQVt%2BqjzzMHlcO8%2Bgx3JRPWAgBzs0AW1N4qNJ8Dnq%2BqroTzmyAYh5uG2lTM82d5V2TydIucHFWDVLC%2FLVsE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb3d43dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52702,"size_decoded":14703,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (634)","md5":"bcff4f0f0eaaf75435e924eec527616d","sha1":"fe1e7850635b2a1564e8f7f3195617d2eaba73d7","sha256":"552825b186d7451e0bf6df23e2b78b333e0ccc81aea2dd19055a8adf4b9fe329","sha512":"4024f94cefa21823abf2b5e43199747565c376da220756f5051816aa4ce8ec2fe6af69b483163e566fb82ff46799d3f32d9426700c4c5d24a71e647fe165f784","ssdeep":"1536:PgPF9fSwqM/mvnRo7o5M1WGfL55CJs3Iew+AHk0v+:P6Kd/GfL5wsW++P2","tlshash":"1e33b51f7249a65986b3d095707b018a367a85a09186c91cf439ffddce2ce0ec17ebb4","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-09-24T11:03:14.438509Z","times_seen":2109,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/revslider/admin/assets/images/dummy.png","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.009Z","timestamp":1790244254009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/revslider/admin/assets/images/dummy.png HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a400f6bb8d5adfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"49-5a0c7753-7a47a5d51bfcbe65;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 15 Nov 2017 17:20:19 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aNRvbsP3oqWXemM0h3fCv7p3gKgYjeDlU9b8pbO%2FN6w5zDziO3QUKwg5gTZONo%2BojCJ7LYxXZbDfivyInR%2BF6tsxd%2BCO6TCu6BzL5vgOjHDSbCyLMoAh%2FanzF%2BUvnNO59S4%3D\"}]}\r\ncontent-length: 73\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":73,"size_decoded":891,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9d08eac154f5b02ef14e612fc25b9bf2","sha1":"5a1e9121811015fbc274dae72072f874aee3d805","sha256":"17af9e65317bbbfbbd0bcdc729f14faadf37cd08cf30cc0fe0b72443e78cbffb","sha512":"9143c0e41c5e282ff665304b2b1edaa0a13b2c6d1fb70a076f4ed46aa74b2ce7a9cd36e7452b8e73b77bf01c435a60820745b0acf4066299fd432f028beb31e1","ssdeep":"","tlshash":"e3a022c3e380fc3cc8000033a0028b30e833820808332f0c28abec3b0c22a00088ca83","first_seen":"2023-05-01T15:13:58Z","last_seen":"2026-09-24T10:05:31.305496Z","times_seen":1717,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2018/03/studio-swit-www_10.jpg","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.760Z","timestamp":1790244254760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/studio-swit-www_10.jpg HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://studioswit.live/\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a400f6c04e1ddfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"6c8d6-5aad1736-47c041ec2548db71;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:53 GMT\r\nlast-modified: Sat, 17 Mar 2018 13:25:10 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xl4y3IxZVttaMplCJWC6jwxRau3ITppUxycP6bwKcDEDJ7YVj0%2FbAhON3XtW2D6n4%2Bv2fJgqWz3s3et5ZiTDJCMGC26lr3NXTZ7hKG6JKtNB6tKWl895dzEZicijZxKjNbU%3D\"}]}\r\ncontent-length: 444630\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":444630,"size_decoded":445448,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=5446, bps=182, PhotometricInterpretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, width=3631], baseline, precision 8, 1920x708, components 3","md5":"9ea55d3872a346e511726abbea9c3b01","sha1":"89494d36032c25d30883c0f4ca5d77209268cf2a","sha256":"7fa41ef156302e4439f80d9bfac36d4f753bf99d7c2e237a8b1012ffade73fc5","sha512":"3dd2cedc5c1d802000d028ef1cb0d1481b627941c282a6d0a7eeeb42f957c11804ffcd2e96307edb8bd413867fdd381b673216983f0f8d7bc9b4bf1fcff88154","ssdeep":"12288:6QhgzOuGwRyeX/wL/4LAZ63xEICe/sW1VuNxdYGc:6QhgzzRyY/w74LLxCM1VuNrYp","tlshash":"3194de55ad20a711ed406a34a3a42bee021d7e3f06e5834e786dec4b37129ef789fc41","first_seen":"2026-09-24T09:40:04.557593Z","last_seen":"2026-09-24T10:05:31.306162Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-DR8DD01NEL\u0026cx=c\u0026gtm=4e69m1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.849Z","timestamp":1790244254849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=G-DR8DD01NEL\u0026cx=c\u0026gtm=4e69m1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\nexpires: Thu, 24 Sep 2026 10:04:14 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 160510\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465481,"size_decoded":161094,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"04e7e8926e335134c2c52a3195729477","sha1":"01f6a0ce662271ad4fab8fb4806ed9f5df40e60e","sha256":"318247920c6d4406e21187adf66effc744563923e9fc9c963bde3c83e833f9d4","sha512":"aabe286f2313be17beb9bb6ab7584cdbc30ea1fb1da8ead8dca877fa501d80965f907871186f39a2e2898edd5b681a66dc09907feb9004aed3292343b3a1c785","ssdeep":"6144:dhKp1mijFW0XwgY6JDjrU8dOc1abxE/B3pd3KrLWn6DT9HlrfRQm:RIFWhx6FPKunkBFL","tlshash":"8ea409cd73c674229392f674903f018ba67b69a2b84cc899f289dcd42d3469a5173f7c","first_seen":"2026-09-24T10:05:31.307038Z","last_seen":"2026-09-24T10:05:31.307038Z","times_seen":1,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/ui/tabs.min.js?ver=1.11.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.947Z","timestamp":1790244253947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/tabs.min.js?ver=1.11.4 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhI172UXOwRKlsHFFmjR9dCrO1MwErL4VlnpU73HWvU9iFgCxrFI9S0ATvCHjrII%2FjwxKhJzZE9xqHGqU8bBW8VNPJr%2BGAaTtbqhZEcJR%2Fdau7H6WyN6PYq7r4AW71hL7uY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb3d3cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12110,"size_decoded":4799,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11897)","md5":"5330c83425ab1b8f67ce63f741427adb","sha1":"81405db33a325f50572b47ed0e854052b7241612","sha256":"429f6b7a5802c15145bddd69b400dae34b814eebd42ea1a32934c9a55a159391","sha512":"abf3876e1681ed8996cb8fb49c229f8f9802841e524084ef426cc802e2f10f85c8ed61a03bb6a5b94b016951cac2f4cabc96caba3d4b8037343ecd7e15040aff","ssdeep":"192:48gq1BjM0in81ReyKpaL7YWI+SM5BeuhUq2M4:48gSjMr8SrDW99aqX4","tlshash":"50427308328131b265dbb1e924379287a527e99d9504089c711b8fddaa7efc431f7e3b","first_seen":"2023-03-07T12:04:29Z","last_seen":"2026-09-24T10:05:31.30851Z","times_seen":410,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.631Z","timestamp":1790244254631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://studioswit.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:30 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nage: 238304\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":23853,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-24T12:29:27.252991Z","times_seen":193416,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/css/google-maps-builder.min.css?ver=2.1.2","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.903Z","timestamp":1790244253903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/css/google-maps-builder.min.css?ver=2.1.2 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Ua2%2FAlw%2B3AgWFHFWfU94hH9OVW%2F6uyF8ot9EWN9dr98a2EKRIsdr%2BYk%2BMOO0oGi2soUOY9ySBiRk2CDJZuZKAxr20fzHBhxnAduR59Hfc2AiNXR5dx9jNUdGpvGC4Brrns%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a400f6baed1ddfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"1bba-5a0f25b9-b6a34fda9075c106;br\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Fri, 17 Nov 2017 18:08:57 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7098,"size_decoded":2390,"mime_type":"text/css","magic":"ASCII text, with very long lines (7098), with no line terminators","md5":"c692b7bd614fc54de0d2dabaa53390d0","sha1":"45dbd269c4fa5d72da74eeeba2c2b4cb76e2c615","sha256":"b89d0c0bd2198e615e772a5ec226fd2bfb717e5db4bb523e8483635f8807c4e1","sha512":"0ecbfba204ae97a7ee3e8e42e1383b03b89f77538e111b04cdc0fbc7aaa38b31be553481c75de4c2d4e14a73d3535a5d67be2e7ffa9d12073d4f75aa8419c8a5","ssdeep":"96:CR1zV2l2QVYpsG0FW7uwYhQ03FTZ5s2OHSIF1sYIlZwiHHUW/Om57hyEhZA4hrhf:CR1p2l2QVYpsXFW7sT3FTROsYjSB3","tlshash":"97e1427335d07a6bf22fc72b39a6eba852b6c821748b82fd5e3c6650c54b18714335b4","first_seen":"2023-04-09T15:58:26Z","last_seen":"2026-09-24T10:05:31.309718Z","times_seen":574,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/assets/ui/jquery.ui.all.css?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.915Z","timestamp":1790244253915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/assets/ui/jquery.ui.all.css?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULWPuISqd4q27d%2FNmY8EcwqssrBTjRaGb24IJzYrwMVPfj%2FnnX8f3h9zfi82u7sflrZ4X8n6FR8i%2BbI%2Fdcghwl%2B2S8mDSFLY4B3kXVa7TnySDPmcjhF8auKVKFetQQ0z84A%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a400f6bafd26dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"494d-5a0c7246-94c8528429c7dc83;br\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 15 Nov 2017 16:58:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18765,"size_decoded":3912,"mime_type":"text/css","magic":"ASCII text, with very long lines (365)","md5":"a4807e938a25147d3b7487724001f055","sha1":"2a07d7116c4743b8ac24b1ed874c889730201216","sha256":"00356ac9f49fedcd3d3642734307f6b529fc2d087092c84012ed610bc21c6e1c","sha512":"ec5d4f8152c8423860f74024c586012d4c5cf22019faa1cdd3c3b1b21cbc11e7fccd4a47d93db2f36bc594cb330328ff9a03d6f8525b7d53896bebab1dd92077","ssdeep":"192:Wp/FbUrZgZ9+S94ubb2nY2c/Ieclz2INI724AEaxH0TmblQBsWBAEBdr+Bp0Phen:Qeyflm30SpbCtb/yjbjzdn56lg","tlshash":"99826a9024c3602dfa13e92461e11ef6413a0341dda71f7ed09a76ada3e6ce9c8b7d71","first_seen":"2023-04-05T16:26:37Z","last_seen":"2026-09-24T11:03:14.542153Z","times_seen":619,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-110803882-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.934Z","timestamp":1790244253934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=UA-110803882-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\nexpires: Thu, 24 Sep 2026 10:04:14 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 24 Sep 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 135039\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382112,"size_decoded":135689,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5086)","md5":"ee37f7166bff7ccac3cabe74b84ce239","sha1":"a2f00399a2d6164298ff07012bd44c75e1d4119b","sha256":"bc40a2a6cfdf3c2d51453cff6d023a49f9bb57832790a6eaf762013ff7741184","sha512":"415e74c310784eca1af22c40374b86ba6bfa608ed6cf496f4b16602b429546e27e28bc6511782dbe019f3a47614ee197d272d3e36c4449ef90f173c332e27076","ssdeep":"6144:ap1mivFwkl6ZRqsdcc1abxE/B3pd5ovLWrSH9G5m:5B46JoSrEJ","tlshash":"4c8419ccb3d6702283a3b574903f018bb27a6d92b84cc898f286d9d42e7465a5177f7c","first_seen":"2026-09-24T10:05:31.311391Z","last_seen":"2026-09-24T10:05:31.311391Z","times_seen":1,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":52,"receive":31,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.943Z","timestamp":1790244253943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jil7O6%2Fsu6ZD729W8jRZ%2FovX8HE2076uYy6QbY593GlWPwtgk%2FHl2fwOmPCpPDRypyZI08LMub1pvcAc%2BXAXd0uQtkGLNtG2FmBrcw%2FROongVsZEZ71KxA9Ltt33r3w1ui0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb2d3adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6908,"size_decoded":3345,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6684)","md5":"8cf7f36bbd79bc0664b6113f7a7837fe","sha1":"ede1f6fe3d18a0685b30c6d465686de7870f578f","sha256":"38a448e9e03a9f64e7611b19af4bb8ec97fde2c708dc57ebbc7701be7ae3af08","sha512":"0b7264662a0c20264453d58e7c619e51251912125fa4c287b7d1a258709a671e0fd15f1f215c9c656ea6187cc32238b52bedb89eb5df2c20a9e2d45ab6ca50a8","ssdeep":"192:gqQ2vQ/wFyw6DExs/aaVWwLiEpcntkVosNFW:gIvcHaYGEetFsjW","tlshash":"9ce18588b35abe4649e7e124113f610ba23194ede0044c9dfcb8e5d96d7aad4b037f39","first_seen":"2023-03-07T12:04:29Z","last_seen":"2026-09-24T10:05:31.312327Z","times_seen":990,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.parallax.min.js?version=5.4.6.3","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.687Z","timestamp":1790244254687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.parallax.min.js?version=5.4.6.3 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=INtBGCfeYlC2iMNuNTfKCHnjZ1e2N26%2FRmq7egFUuKsEdseutXQ6wEVLx6D57Jk%2Fkcg%2BJYgUjMKkUO3H4hllmL0Mp7NMStSMGgvkuaH29euxdnWxU22N%2Fm0YVWGja%2BGbOaI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bfce15dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10931,"size_decoded":3994,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10692), with CRLF line terminators","md5":"aaf7e95e34f292b1a098887db6cf9ee3","sha1":"e00d5e9a3dca546921b83d15a0cb7a9261467027","sha256":"149d1060d155832cca22142423c095866d6b03277f372ebc1967ecdf579a435b","sha512":"824a519d23ccf5819ec06039fb8ab8b9a43679052bfd7d644b7c5c596b7a9ed5f51e1fbc82b2558db2c3314a2a4982c8f54154ea1bd0338bed5675a7dda76d16","ssdeep":"192:BcLK1q1e1XfU9dciEK5FKw0Vm7Wgput9mHJnGN82PbZ7:n1q1e1Xf4+KL6m7WgpAmHUNVPbZ7","tlshash":"7432d95a6e2028f640f3132cf9ad45d273228572e5068d41f9e6f9b9566ce9c037abcc","first_seen":"2023-03-07T01:03:16Z","last_seen":"2026-09-24T10:05:31.312953Z","times_seen":1262,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JGTVB5RY02\u0026cx=c\u0026gtm=4e69m1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.830Z","timestamp":1790244254830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=G-JGTVB5RY02\u0026cx=c\u0026gtm=4e69m1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\nexpires: Thu, 24 Sep 2026 10:04:14 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 176063\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522939,"size_decoded":176647,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"5e7b76663aec1ee5750180203128c48a","sha1":"9b4dbc363cc5bb2a1959d9e0eb8a723b6e6b0bc8","sha256":"725c29f84d4a32e959c06efc2a15b954ad4c408c2a885d2e23ea017b267043ef","sha512":"674003d6ac164e4f9111e0bd6ded6e2a1ccaa3e6c5a57d9de0ed95597eff43d40b9a648116a1a4f2b591c8fcb9e31a74fa2e15ce93ef2d8ef3805fec0d53d345","ssdeep":"6144:tCp1mijFW0XwgY6J4HnrgoUdOc1abxE/B3pd3wrLWNUDT9HD8eQm:7IFWhx6YhiwuNqBl","tlshash":"63b419cd73c674229396f678903f01cb667b29a2b48cc89af289dce02d3455a5163f7c","first_seen":"2026-09-24T09:40:04.525369Z","last_seen":"2026-09-24T10:05:31.31354Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.9.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.899Z","timestamp":1790244253899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.9.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QNbfjhA60f0fo43jXpadsHJXllW%2FLPncttpzUU9kMfPIWPiNYhZoAn5PGBJbsHd%2B30xpCzR31kKxyIAch7JImhsGYOKqACX2yx4%2B8V5SfJlKvDiwULzQ3dnotDN09%2BWDDc4%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a400f6badd1adfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"646-5a0c773c-21447459090c874b;br\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 15 Nov 2017 17:19:56 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1606,"size_decoded":1375,"mime_type":"text/css","magic":"ASCII text","md5":"7d5d92ddcbe33c91355c20a1d35e7a95","sha1":"1843e6911072990d2193279a299c9f70523ed553","sha256":"e291f67dc3e643bfde7604e48a75e17298a3868ebc0c4554b9e8c17355fd6115","sha512":"6c0ff414d95c31c0ab1a549a466e22eb5df83d798968b8df1d81e975dd04780c14c2f5c662ec97cecfe08cd42777587601d3bffec5350c0e1269cac45f274496","ssdeep":"","tlshash":"de31b9b426009eb0cb7ad0c77ee9e70a630e1430ef0f4f2b84c1a2bc83795a51171509","first_seen":"2023-04-05T14:11:26Z","last_seen":"2026-09-24T10:05:31.314237Z","times_seen":2893,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/assets/animations/animations.min.css?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.913Z","timestamp":1790244253913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/assets/animations/animations.min.css?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRCL1ccF4cuilNhUKL30QzJEa5eO3o1bTs858G4quk9Kxev7bZeugkxpLJZUG5bMCeLqmk1eIJzr0jQ5SAU1hIceL%2Fn%2FPvRLMN92BCu3Up3Az14shqUH7H5u8eMg6hF25CM%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a400f6bafd25dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"e48c-5a0c7246-c5019a55d357a86d;br\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 15 Nov 2017 16:58:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":58508,"size_decoded":5259,"mime_type":"text/css","magic":"ASCII text, with very long lines (58508), with no line terminators","md5":"e84ea59f1f6d11b5553e816613eb659f","sha1":"d22c414356217e342565d629ce96a684a5005aba","sha256":"e803d4290c5baec790ecde06d9308c6bf17f967c8232e3651844bfd60dd2a9f5","sha512":"cdcefffd5e3fc918a2d9345449a8d43c3d030536e3dfb389a1cde73ea24ec16bddce3ff5b421d3f7b8d91ec42ef7216e0190f2190e928f0d891c05c120ec9d4c","ssdeep":"192:DzJjKX72RjOEOKumKDEXEfy1SkdX4GM43NSGHY5i:hjAEOK1MaNSDA","tlshash":"80434f9945a20199816a0766d7c8bba80e2ccfda74735cff73a63c0b87017de23d9527","first_seen":"2023-04-05T16:26:37Z","last_seen":"2026-09-24T11:03:14.510599Z","times_seen":2947,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?v=3.exp\u0026libraries=places\u0026key=AIzaSyAP65PTLGijHdv0IL4tm_5rVmwMiwdQCbc\u0026ver=4.9.13","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.933Z","timestamp":1790244253933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:09 GMT","end":"Fri, 27 Nov 2026 08:06:08 GMT"},"fingerprint":{"sha1":"6B:DD:9E:90:A1:B8:0E:F7:83:1D:3D:17:DB:A5:85:98:F2:E5:07:8C","sha256":"99:41:52:4A:38:1D:4C:B3:19:1D:AD:0C:91:83:B5:70:FB:2C:08:37:01:B5:0D:75:CF:2D:88:E1:5D:C5:A2:7C"}}},"request":{"raw":"GET /maps/api/js?v=3.exp\u0026libraries=places\u0026key=AIzaSyAP65PTLGijHdv0IL4tm_5rVmwMiwdQCbc\u0026ver=4.9.13 HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ntiming-allow-origin: *\r\ncache-control: public, max-age=1800, stale-while-revalidate=12600\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\netag: d3ea0c7d\r\nvary: Accept-Language, Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 385418\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=81\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1364346,"size_decoded":385993,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14690)","md5":"d80b60c296b24f63d699df8bdf1e1f79","sha1":"ead3f8402120c78188bf136e2334def6356f34ef","sha256":"81795a19b72e9ec92afc8c3f25f855b7fdeacd84ff661a6ac00349ba6d18d63f","sha512":"b2c659b902bb228b7f9a3e1d9d8b3691a983ca8e6429a48544ae3cbac03025fd98615c3cb0e1c9467272d7de9d220a5073cfdc92ccc69b5dd9e59778a647f528","ssdeep":"24576:8az8GbWgNJHO+YaUTtXebvU29Dyqoj3RvVIWQtT9:8az8GbWgNJHO+YaYtXebvU29Dyqoj3Rw","tlshash":"13254b6d3261376aea73c865c11b2106a234b887f10489fcbdacdad29ff5d8191f6734","first_seen":"2026-09-24T10:05:31.315409Z","last_seen":"2026-09-24T10:05:31.315409Z","times_seen":1,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":90,"receive":39,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/js/plugins//gmb-infobubble.min.js?ver=2.1.2","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.960Z","timestamp":1790244253960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/js/plugins//gmb-infobubble.min.js?ver=2.1.2 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q5prGPi6HvMujtPWuctf7GSAzRYVGKmAJgLzBv6JeNdF0xWgjPMnDXPtz9tV11j%2FHo8NQUisls4euMSqC1CojaYu79r28uZpiqLI0wKnv2g1hZl9SX1dZyv2huGyVJKdshw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb4d46dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24526,"size_decoded":6472,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (24526), with no line terminators","md5":"c369de3c7e4cb0a61f7b83d3b28340aa","sha1":"bad48451d172be46db10c9822845f8372bd921c4","sha256":"d76c93e98af58874b7d29ffb5aa19eb7728e79b8bf20353385bdc0d56360ccbd","sha512":"64e087db67a4a0a871559a9d48911021d8e981df75896815df4a2138f4393e9e0ff61ef5852434713d38711d96e4cdfdeb496f7a997a09a38a089e408195e05d","ssdeep":"384:E+TznnlJedwVycT3P6GT2uHJmivOZF5Py/LTpbX0gypy3+AMWQ5wKV1XsRFyoYMv:NTznnlJedNcT3P6GT2upRvOZFIjtX0PO","tlshash":"40b224d0b6527824826ef08d101adb48bb3b917cf625c29c35f5ccf286f9e446a6e774","first_seen":"2023-03-07T14:03:25Z","last_seen":"2026-09-24T10:05:31.316401Z","times_seen":630,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/includes/libraries/map-icons/js/map-icons.js?ver=2.1.2","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.963Z","timestamp":1790244253963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/includes/libraries/map-icons/js/map-icons.js?ver=2.1.2 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYmTbbvkyDYgB0SUj8Mindtj0%2Bc4Jo1ya0sJD%2Bfh5x4l76nWn2OcVLVGDJkgtwq2KblHyaLPQPGuiaZPE5zXsNDTzDLBxBsC8xQLh%2FNVQiPjkQv1LvqEqo%2B%2Bj9R6j6OheFo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb4d49dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4673,"size_decoded":2859,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (976)","md5":"b1a0c2fa271b0048d8fe96e1d15d16ee","sha1":"ae4076a34116a028551f8a0043df9f1f5173c617","sha256":"7a1f3b17dff117ebb257fecca1759c81fbdbf4f082503f18729850fa3867cbdf","sha512":"c74ad640583153e39a0852bbab7208e0b3f72b0768f676e5f215e51356c0a3170ec7754a3b2ff734d180682cc64cc7b86e1b08efedf0b38c811c3fff8a9d10b0","ssdeep":"96:UlZsTt2u0yXS+/AP9sLC4HINAnAKAWVDzEsF56KF9iMRYT6m8DGhwM:UltuHS9jCnddDzzrEbQDGWM","tlshash":"8ba1938e9b7010f4d5a3735d6e3f5f9a7aba90b95bd4824c702dcae40fa28481349df4","first_seen":"2023-03-07T14:03:25Z","last_seen":"2026-09-24T10:05:31.317022Z","times_seen":631,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2017/11/apple-touch-icon.png","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.788Z","timestamp":1790244254788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2017/11/apple-touch-icon.png HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a400f6c06e1edfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1520\r\ncache-control: public, max-age=604800\r\netag: \"15a0f-5a0ee82d-f4e6baa0cbe43bf6;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:53 GMT\r\nlast-modified: Fri, 17 Nov 2017 13:46:21 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nFdkKhpKEHt7LTSIR0knCIrz%2Fo72oNQX8c1svHNlbXtouoD0ED0kr8yqEy4JZ9jawnwc11q%2BjhZGGKyvEb13L0erc7BLGeCp%2F5CWjHMy%2B%2BVUJmWjy1SEm1TnYQEb%2BfvVx6o%3D\"}]}\r\ncontent-length: 88591\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":88591,"size_decoded":89418,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-24T12:27:34.601628Z","times_seen":18635028,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.6.3","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.901Z","timestamp":1790244253901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.6.3 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T05gQTPrdDsGG8zF%2FOgFr0y6ofqVt%2BHtKn5ZZ4berw6XYw4%2FiJPjr4Lnzm3ZZzxdyt1FPxubwTeVvjVLjTpPO1lpCyQiJJIdYI1MrnhrQizHGU6N9fKLxim3j1GsIP0GJaw%3D\"}]}\r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a400f6baed1bdfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"7578-5a0c7759-8432d3c6b10131c4;br\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 15 Nov 2017 17:20:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":30072,"size_decoded":7694,"mime_type":"text/css","magic":"ASCII text, with very long lines (29701), with CRLF line terminators","md5":"c4ce361995ff4e22f22c79d0ead65f35","sha1":"2d07f0f1b10bef9b90540bb14181c019b0a32c2e","sha256":"b0b1b6ccfa5a09e69e2e1e89777043a637e23f5b9aecc0a3a86e04495804b239","sha512":"92de6c7ac7d04f2fe041befa5e7c66940635ea7011a8d2655466f5a37a7b8f6db9b0d5d4aefa3b6e03227e8998c5699bc8f154418bc850f3fa60a5609ce056f6","ssdeep":"384:bTh/MEow4rLT4ILX8sSeUiOWC7G7C5+TU1Zz80id48f/:b1ME0LTPX8sSeFOWCy7wmU1h8D283","tlshash":"20d2da70e98975fc77a7c22563c0b7adf02ed122e6520d6ef02f76f986d3086446e648","first_seen":"2023-04-06T23:06:42Z","last_seen":"2026-09-24T10:05:31.318125Z","times_seen":3416,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/snazzy-maps/snazzymaps.js?ver=1.4.0","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.931Z","timestamp":1790244253931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/snazzy-maps/snazzymaps.js?ver=1.4.0 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwXekit%2B7VeHbYyqrV13Q6ZWMvXdN3S9DBDiSftU4bcdV7r7T4ToWxka20Z4uHU4XJlA3tstz0mZub7Yng6AnXlK7sciHEXCs0T07VqKxqtxrPFUu8iSgYn7Q2VZD109wwA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a400f6bb1d33dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5068,"size_decoded":2791,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5068), with no line terminators","md5":"a8b6bfbc76f3942076078846f8d67d93","sha1":"055eb0208b8477d64a1680890318fb699e16ce1e","sha256":"ce03edab83c54dc71101d2b8fccbe2d1ec5c29806a933a366db236b2d455ad29","sha512":"994cc7fc58f469f0a5801179954ae69c3ef5352bda20c4a478747d5346a69d1a7ac9ab096776fa3abbc4147dd2ce8b2464dd99bd312d44c198555c9fd5c5c689","ssdeep":"96:Myh4qqUzF4n72aENdV40qQYxEgKJ5q4qu7JJS0JbU2lfAUMNduzPvQOR5AAn6x/S:oqsnLVTP455RpV5xfAAn6JOEyEYt","tlshash":"63a1dacfba34f8238563a651183f810ba23d9635148845d4a790ddf12cf6d5f072ef29","first_seen":"2023-03-07T12:57:02Z","last_seen":"2026-09-24T10:05:31.318922Z","times_seen":1481,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/jquery/ui/accordion.min.js?ver=1.11.4","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.949Z","timestamp":1790244253949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/accordion.min.js?ver=1.11.4 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRWPqqgQzIrYSpUVm%2FKnzRZu3RdEACphfDk%2FhC3OhQz5RezgBz6sPBPbv6mi%2BonZ4OyGOfPoKh8YHC72ui3dPG0If3VfzwRb9%2BgKm71duPdelSr0seLzkzJCsuTWCX1Nzho%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb3d3fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8584,"size_decoded":3520,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8361)","md5":"334c2ffb0b086ffc0f6f192ea120f3c2","sha1":"1a1b1840fa91c9692a546a9074709f74b1d032ba","sha256":"bbde0ea9c50274448afdee811988867d3579169daff16b64bcb99ad1ee10905f","sha512":"6360a49365d8d0af829fb837c54921ca60317e5b7e75a967adcfdb6433611fd1ff5ffbda15f889074fd0b1fcb62b31822cf9ea3c4ae7fb28aed10d7eced08429","ssdeep":"192:gOWgDgjF7zG3xZye3orMFKYVeZN+l70Qd:gOWgDgVSoYxxl70E","tlshash":"b4029614324439f1789b91a4592b5e4ea03274d8d4054c8c733999cf9be9d84737bb7f","first_seen":"2023-03-07T12:04:29Z","last_seen":"2026-09-24T10:05:31.319402Z","times_seen":365,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/js/frontend/google-maps-builder.min.js?ver=2.1.2","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.961Z","timestamp":1790244253961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/plugins/google-maps-builder/vendor/wordimpress/maps-builder-core/assets/js/frontend/google-maps-builder.min.js?ver=2.1.2 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2et%2BQQa5GQzMNaksLfnygWydf7Owz2ztYK5Pxd1Vy3Jrv40mR4uydZzfUg7Fy3%2B2%2F8Hw1lzm5YdFzN989J2S7Z4GGVaj5bxdENnCqX372QW5fhrml4hhXFeA47SBFI5DPf4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb4d48dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10176,"size_decoded":4078,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10176), with no line terminators","md5":"842a1ce97da82b060cf4be540c299e05","sha1":"162fead73a2bc8dc6327cd2a6344abd97b01b505","sha256":"ab3b0e03916b5e93455f356c6a3514a6197f9d1ee341209cd7d4d10bf4358d3e","sha512":"813718f04a0c3fc9a4fa16a9a8772d4298323473cd8a420adc8c3f4c3e5d1127fcbaa978aafb9bbb245fa3b849d24423269e5c51c7548c02da8247b2e9ccbe91","ssdeep":"192:O5Bj0m0dZ9cU4Hn3XYHUkQ/bEoDjZjohYOSY6mnr5Oz:bm0dDin3XGUkYlOSYVntOz","tlshash":"1822d74a7844687bc1f3b75c423f6b80a132fb8ed329d6631304c9b4a4b6d4de1b3965","first_seen":"2023-03-07T14:03:25Z","last_seen":"2026-09-24T10:05:31.319873Z","times_seen":579,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2023/03/StudioSwit-11-e1679363728244.jpg","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.011Z","timestamp":1790244254011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/StudioSwit-11-e1679363728244.jpg HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a400f6bb9d5bdfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"2fb5c-64190e90-a82c2e320573159e;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Tue, 21 Mar 2023 01:55:28 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XltKbxHpScrZFrvQ4JLQ8iUE%2BDtffytvDsvjRgHmfj0TwUJ3BqaoLNKDxlL3KRyaHz0%2FGR4Pn2sSHtjit2EVNpGqgBZ73NSh466SE4kM8IslX6ObZdvo16yiwCqi2f%2BcD0U%3D\"}]}\r\ncontent-length: 195420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195420,"size_decoded":196240,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1200x1800, components 3","md5":"98112c8464a3ca83b9ff4c3a4b1336ff","sha1":"a28b2872244f56f37ae2c0de2b9d981c943660c7","sha256":"f64eefa1ba2dafe70b8061aeeee179e71739f756df5715e57332e954ae812e92","sha512":"12c44f953b05d3c074c73bee7832191108bcfaf7b94a2ae7fb2da77e2073454c1f8fce3104340a39af59df664cec00ce720a24ba406bfd64e829729491c1327b","ssdeep":"3072:hEjTfnsexXA14NVWe9QI9slSbmMv8aLRV1Ut3dp9xxK1NTCtwgImZ7nyC4MrOlY:hEj7sJ1GVW2Q+slSCMv8wV8dp9znWRmN","tlshash":"741412476c4545c2b42c8ba5fe439d198a62374c9cea30e949bbcd8fbe600f57c6724c","first_seen":"2026-09-24T09:40:04.568068Z","last_seen":"2026-09-24T10:05:31.320405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.481Z","timestamp":1790244254481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:09 GMT","end":"Fri, 27 Nov 2026 08:06:08 GMT"},"fingerprint":{"sha1":"6B:DD:9E:90:A1:B8:0E:F7:83:1D:3D:17:DB:A5:85:98:F2:E5:07:8C","sha256":"99:41:52:4A:38:1D:4C:B3:19:1D:AD:0C:91:83:B5:70:FB:2C:08:37:01:B5:0D:75:CF:2D:88:E1:5D:C5:A2:7C"}}},"request":{"raw":"GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://studioswit.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 23\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://studioswit.live\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nserver-timing: gfet4t7; dur=10\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3,"size_decoded":552,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a80554c91d9fca8acb82f023de02f11","sha1":"5f36b2ea290645ee34d943220a14b54ee5ea5be5","sha256":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","sha512":"ca4b6defb8adcc010050bc8b1bb8f8092c4928b8a0fba32146abcfb256e4d91672f88ca2cdf6210e754e5b8ac5e23fb023806ccd749ac8b701f79a691f03c87a","ssdeep":"","tlshash":"c7200000000000000000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-09-24T12:17:02.476265Z","times_seen":441363,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2023/03/Studio-S%CC%81wit-0-strona-www1.jpg","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.012Z","timestamp":1790244254012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/Studio-S%CC%81wit-0-strona-www1.jpg HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a400f6bb9d5cdfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"148e48-641914c6-4e6a97c6a0be5b48;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Tue, 21 Mar 2023 02:21:58 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jmuplG67059XzBmexptBSZhq0J5Q80Zun0Chcb7Vb%2BJCIHPMxjTdXL%2BtTojtIBKuLWpiZGhGY0dI%2B%2Bpi7R2Qktck%2BFDKMHAewlv6BdS3ljf%2FCwiISACqyJvi5zTAhAtMo4c%3D\"}]}\r\ncontent-length: 1347144\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1347144,"size_decoded":1347972,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=2047, bps=0, PhotometricInterpretation=RGB, manufacturer=HUAWEI, model=EML-L29, orientation=upper-left, width=1535], baseline, precision 8, 1535x2047, components 3","md5":"542d1df371daa6a55a85d32f24b89668","sha1":"4f74a4275df04b7c0754586f6d84babbcde7a77e","sha256":"860155636938a3f0f59c3e5703c0b7d062d7cfcddf42b0d8511517524af5e72f","sha512":"a66831ea2645c119fe2d6d1b1efae306927199e774addd6a9dba2eb49533e3ec8ce52234399691a89681699e2b32ef41f5cf1e704ce32849684e7b2020354800","ssdeep":"24576:uKePy0XcQIZ+J5G5X1JPRJ0RKfijuFwpjkri/5hTkXe0:aPy0Xc+K1zJPijuyt24TOl","tlshash":"5a2533b98710791bff018435f6c197bb65a48d7b866719b0f12fab42ef38851e9286c0","first_seen":"2026-09-24T09:40:04.579666Z","last_seen":"2026-09-24T10:05:31.321517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-includes/js/wp-emoji-release.min.js?ver=4.9.13","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.072Z","timestamp":1790244254072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.13 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1sMbyulRTNdpglHOwtmupCAfkgAhkECSTflNyZOENE6aRkyGJI%2F5pauF4DqmoEuQgYFsZxPJtrGf9zWEE5smogu42J%2BZ1UtKEVI86MHDbNovhufseRV%2FI5jAqiFrTxy2EE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bbfd6adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12026,"size_decoded":5135,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9118)","md5":"15d0c302dc74fd87bd9cfeab513e13e4","sha1":"d25b738415c1594c4f840904bb876055d96cf256","sha256":"d2458b9fd9089fdcb9de317093e004ef3a65597dc68b9adfdeb15a7c9968d0d5","sha512":"cd6489b36e49844a85eb0b2e168f05f3c5bebb622395786b9324b32d85b10a4b4fd9afbe786b2deba6ecef0efe1cd51f2c00d72e75578cf3fd5d59283e6e9094","ssdeep":"192:3IdCwIdZKx/4W+TJr3J//bEvAbWXXR6AooHyrOUlSY06KdpNfojt3gzQ5aY:35zw4W+TJr3J//bEI+XgA5UedpqtgM5N","tlshash":"d442208f733a5f9fb43e26d78e96cf0e95d949932580f074daedf68229d005983b4840","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-09-24T10:05:31.322431Z","times_seen":1487,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2017/11/avenger.png","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.317Z","timestamp":1790244254317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2017/11/avenger.png HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://studioswit.live/\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a400f6bd8dc1dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"5cd2-5a174dd4-10924f63ed1e9952;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Thu, 23 Nov 2017 22:38:12 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KgXfUyuggDxUkgfuSgGQ5NgIOYVmVO7OWhi89GQAT1%2FfTLaJQe4aX9O8LAiMzB%2FA%2F5kLP3oCxWpqDDxTXzn5RdpEgxI3eC0VVVSr5GWJwRw8%2F8SRw82kh8rUrO3bIeMITI%3D\"}]}\r\ncontent-length: 23762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23762,"size_decoded":24581,"mime_type":"image/png","magic":"PNG image data, 200 x 100, 8-bit/color RGBA, non-interlaced","md5":"f2f9d2b56b4b7ece49add33cc4fa87fe","sha1":"b771529daa489a098988e7bc7206076d9bc0a62d","sha256":"c3a93225999e9f03194849fc56b2889537ae11fdf749d13da82f8037b85ac957","sha512":"7912f926375e5465a4aab0b35633383adb7f914b57e61746d89973a91a8ec657ab6bf1d0398181e9e8fbce34632e3085eecf5225a40dac6088afe32f180e89c3","ssdeep":"384:Xpts5iVQea5UDoJc5WH1IYQ4krGNvJbuc:5tLVlToJSWH3Q45J1","tlshash":"9db27c26fcf2b099a1479a3568d488a04cb70183ef011cc4b6cd9d76bf507ea8c9f647","first_seen":"2026-09-24T09:40:04.564381Z","last_seen":"2026-09-24T10:05:31.322963Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2017/11/phaseone.png","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.319Z","timestamp":1790244254319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2017/11/phaseone.png HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://studioswit.live/\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a400f6bd8dc4dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"53f1-5a174dfc-7b0c9c24564f2746;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Thu, 23 Nov 2017 22:38:52 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1FgQeoMnzoPR7SvVod8UdHSDWIBOW641h2q9%2BlEm%2F8llF9D6%2Bog8YWEWDuvOa2YkUZQv5n9xjMirCgpFb9yxZmaQqvRw%2BCWuqMdb7fiGr9wZ50bbKkAtHUvmAPwfLEplPv4%3D\"}]}\r\ncontent-length: 21489\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":21489,"size_decoded":22308,"mime_type":"image/png","magic":"PNG image data, 200 x 100, 8-bit/color RGBA, non-interlaced","md5":"7129c26dfc2b8568bbf65362a7ee424c","sha1":"60c79bc42b056f6a736ad8e7c23c540165bdb63e","sha256":"9ad39e98eab75fadc4b558c20fdd6791d2fa9eb97518e0c7975e9e7e41d9202e","sha512":"13694ffe9a60befb72a468068f1e3db945d4330d52d4a901fe26d73bed3492cc98df529585f55d5dc8e2b99c7a83d9ed6ac2ae91a26fc294d361251dbd6da32a","ssdeep":"192:wSEktc5Ou7Vi5hW6WMc0XJX9BmMJ6gt7/67yGGhfBa7NWQWox:Xntc5nVCnbBTJJXhfY7h","tlshash":"d8a25b3abdf2b6b5849ab53668d5290e6c330783c9a15c457bcc4c6a7f0074e9c0b0eb","first_seen":"2026-09-24T09:40:04.523891Z","last_seen":"2026-09-24T10:05:31.323526Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/uploads/2017/11/studioswit_04.jpg","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.321Z","timestamp":1790244254321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/uploads/2017/11/studioswit_04.jpg HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://studioswit.live/\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 10:04:14 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a400f6bd8dc6dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1521\r\ncache-control: public, max-age=604800\r\netag: \"c587d-5a1e919e-c0d6ca587d0e8d8f;;;\"\r\nexpires: Thu, 01 Oct 2026 09:38:52 GMT\r\nlast-modified: Wed, 29 Nov 2017 10:53:18 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2z%2BEGFWQ%2Be3kPWhqyihnpjT54l5bAmkRSweZ7o9STHx%2Fm%2BguBZV5bgzQzLFDFVZGHrDng6wNOLYO5H8s0qxVI6Mf9Yb52vqYHtksnwAJgcEfcsqa1TFQbPkILxc2eNX8Mvg%3D\"}]}\r\ncontent-length: 809085\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":809085,"size_decoded":809907,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2048, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2048], progressive, precision 8, 1920x1000, components 3","md5":"b17a3470f11baec46951b99d3d47b3b9","sha1":"e1ccc1048cd7cdf47cf983d959f647d3163bec7f","sha256":"9500f84040554b6bb0f7f91338671d973aa38618e01e39cb9588610f09e8e854","sha512":"5475b78261bbc339c316ba5371bd3a51509307d26e6492cd4efabfb44ac7abe719d99d3f6422628bb2c63f344dead12eef6adc70bd1f46b99a05bbe3e9f0f656","ssdeep":"24576:gjfo7Gg7zc1RIzO7EhJ06LMrPj6AUempWrZCk9:MQamzO6q6Irb6AUg","tlshash":"3705236d0a574843c5b9667d24529d1781ba6c89e37b042abfee2706d37234bff0a260","first_seen":"2026-09-24T09:40:04.516221Z","last_seen":"2026-09-24T10:05:31.324093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u8w4BMUTPHjxsAXC-q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.630Z","timestamp":1790244254630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lato/v25/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://studioswit.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 23 Sep 2026 03:35:46 GMT\r\nexpires: Thu, 23 Sep 2027 03:35:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:43 GMT\r\ncontent-type: font/woff2\r\nage: 109708\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24408,"size_decoded":25221,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24408, version 1.0","md5":"efee2d080d7bebdd2e0aeb2e030813a0","sha1":"f8d38f9f9584e48c2e469877ebd94232265585f1","sha256":"bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0","sha512":"16c55ad46a26e0af340f2b8a89bd98c1ccad5c976b434aafa7d1d8cd5049b40a58c5350fa42029710c9dd8040e7cea05e57979731b941086ca096239169f4f3c","ssdeep":"384:lwfLHrvMt+iWkciwtprblXNenWbFrqBY34OlZDsnNBvlUg0/qxFul2sOgZl06t2b:6bjU6PflXNHFrZJLDsT+gpx59cS6t2b","tlshash":"55b2e06f8ee485008cd9cc61f39bfa6e96d73d9f437d96c2ce8311360e9a199115424f","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-24T10:05:31.324615Z","times_seen":32734,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/66/6c/marker.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:14.695Z","timestamp":1790244254695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:09 GMT","end":"Fri, 27 Nov 2026 08:06:08 GMT"},"fingerprint":{"sha1":"6B:DD:9E:90:A1:B8:0E:F7:83:1D:3D:17:DB:A5:85:98:F2:E5:07:8C","sha256":"99:41:52:4A:38:1D:4C:B3:19:1D:AD:0C:91:83:B5:70:FB:2C:08:37:01:B5:0D:75:CF:2D:88:E1:5D:C5:A2:7C"}}},"request":{"raw":"GET /maps-api-v3/api/js/66/6c/marker.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21349\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 22 Sep 2026 18:46:03 GMT\r\nexpires: Wed, 22 Sep 2027 18:46:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 22 Sep 2026 08:19:36 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 141491\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68040,"size_decoded":22188,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1523)","md5":"6878e17bef92d048bfbbd7b9f37ab329","sha1":"bbe5d9c040249511b1750f972782f6f459aa864e","sha256":"fd1f32a9afaa962437ae5b2e9b8bcf3efc6385fd6726431704e7bee5e1f41f86","sha512":"19f9d76988c163d3d829c3aaa378c530125a81fd84361590693b25d06fe1007bb064e2800222e6be13621ee3f2d8c0bd8640958da131043e60fd54596c4d265b","ssdeep":"1536:khB8Q8xQl7Whc31ZNhPgTUVR1xAKt6R3t4jRvoMP59j0:nqiw1ZNhPgg2R3t4dv59j0","tlshash":"fe631ab5332135b79ff9e1e8509b0103a6b4908a9105c52e3d6dddd61ef8d8b22fab70","first_seen":"2026-09-22T20:36:59.975326Z","last_seen":"2026-09-24T10:05:31.325107Z","times_seen":28,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/js/plugins.js?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.950Z","timestamp":1790244253950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/js/plugins.js?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGSKC1yKhUWPWX9HOGWhQRXhVS%2BMGxctnGeQaIGSEXDm4hSCVHz1fJ3Faalkz%2BNIzwLv4qzBwy3Hfxq%2B1j41D1D0GA923V4hEcgvJ8KyV9f30mDe2LndZp5giPje2eMInEU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb3d40dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195867,"size_decoded":57985,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32011)","md5":"436788b818125f41a42025dcad40fee1","sha1":"3d5f058aec1e0977db367438dc9ddb520ea14d7f","sha256":"d5d8451a6e9625d61190156d92fbba3ce6e3035c04d9f970e70a17984cd48e36","sha512":"e46a2549e4c57a5246b67984cff927cd6289ae442bea1074f8da15f3a9c3f5624634a4752aa9fc57bbd3ccfa1fadf88fcc506d7b95a1d347e3b0ca194ae67657","ssdeep":"3072:JKWSBnVD6YD6Ee4+Q9z8j9DTr2zy4wVUG1Gul:fSBnMpDezIUG1Gul","tlshash":"01142a98b200362106db61f5d25f420e733be479aa0780e87159ccf52dbd96da2a3f7d","first_seen":"2023-03-07T13:14:32Z","last_seen":"2026-09-24T10:05:31.325549Z","times_seen":552,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"studioswit.live/wp-content/themes/betheme/js/parallax/translate3d.js?ver=20.7.2.1","fqdn":"studioswit.live","domain":"studioswit.live","tld":"live"},"ip":{"addr":"104.21.73.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://studioswit.live/","date":"2026-09-24T10:04:13.957Z","timestamp":1790244253957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studioswit.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 12:34:58 GMT","end":"Mon, 26 Oct 2026 13:33:30 GMT"},"fingerprint":{"sha1":"6F:90:52:41:E1:BE:93:2B:EA:0C:E3:9C:89:F3:70:B1:EA:45:1D:D7","sha256":"52:DF:40:1A:F6:FB:ED:3A:9A:08:EA:D2:E5:A5:48:B3:C8:BE:2E:27:E7:72:1D:D5:0D:E6:7B:AB:76:D6:B8:86"}}},"request":{"raw":"GET /wp-content/themes/betheme/js/parallax/translate3d.js?ver=20.7.2.1 HTTP/1.1\r\nHost: studioswit.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://studioswit.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 10:04:13 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D3tDurGQVhbu6i6LeqrKeHT304T7AtsYf67eSCGRegAI5mnuN1BWAuyw9ayH8YYNJaez4BcjpWv9%2FuSLHlwC%2BhoGvDDR4W1Z15dXkpxiU8vHGgHwNnl%2FugYnEaUnSVJEVX0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400f6bb3d44dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6704,"size_decoded":2423,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"af31b2d759ddae795f623b8ff403c3ef","sha1":"a45db8f433ad5d481258e452d75e444f02a0473d","sha256":"473fbe193000b252278e08104106331b16cd71d1d671d52062d98b283a95b94e","sha512":"d1deab9520e64b246a44eace6ba9472b69b3386daab5998a15f31f0de579eb66cf1dd213b83d12f7973b06869c72bb39273d014412f6ac10b960b44b619315af","ssdeep":"96:em/il+Qzu6uyEKxqCWE1X3G0Nbq4KNqBeOHPhM1W:e6gzzuly/xqCWeW4sqeW","tlshash":"1ad1ac186eab202454a3f67e87ffa544f1a681273508dc457a0d52583fa870d4eadbb8","first_seen":"2023-03-07T12:23:42Z","last_seen":"2026-09-24T11:03:14.490544Z","times_seen":1166,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"studioswit.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"studioswit.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}