{"report_id":"65f8c312-6a02-48de-8b50-80bef9c6aff2","version":6,"status":"done","tags":[],"date":"2026-01-05T13:55:13Z","url":{"schema":"http","addr":"www.wellnesswisewhispers.com/","fqdn":"www.wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":0,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wellnesswisewhispers.com/","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"title":"Wellness Wise Whispers - Body. Mind. Science.","dom":{"size":43818,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43813), with no line terminators","md5":"9f4e73282edf0d41f77bd4cd57a7e6b7","sha1":"2d640575f68fa2b101a6f25f39a85ae9b653bd5d","sha256":"37e2c1e95f35107d7daa6b542f70dd245de104b0b2ebcc220e4fd8a386226800","sha512":"743abb0d1dd177bf943d3285e2075d0f1119895860369dfac0b8ff0a582d50a4abaf0fb262c923d286b4703834f086a6d44588454bbf512c88c39172c5a6b18c","ssdeep":"384:dJ0x/pPtBnk6MUycAaBzpPtvYBS4wEQJD5eV0aM7Z2wHt:ET7k69tgI9JD5CiZf","tlshash":"2d1373d291852a3685c357fdb15e3118632ef817daf2bd95dd7885ec06cb8a8f00f12a","dom_hash":"domhash33513f91cbe3d1c68a265e2c4b19d8a2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.wellnesswisewhispers.com/","fqdn":"www.wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":0,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-09T13:55:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"www.wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"www.wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"www.wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"www.wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wellnesswisewhispers.com","ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-06-03","domain_rank":0,"first_seen":"2026-01-05T13:55:16.4388Z","last_seen":"2026-01-05T13:55:16.4388Z","alert_count":192,"request_count":48,"received_data":3240361,"sent_data":26554,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"embed-cdn.spotifycdn.com","ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2019-09-11","domain_rank":84791,"first_seen":"2023-05-30T11:43:11Z","last_seen":"2026-01-01T12:01:34.355133Z","alert_count":0,"request_count":19,"received_data":2317946,"sent_data":8820,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gew4-spclient.spotify.com","ip":{"addr":"35.186.224.28","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2006-04-23","domain_rank":50716,"first_seen":"2022-03-28T13:26:27Z","last_seen":"2025-12-31T07:05:45.322869Z","alert_count":0,"request_count":8,"received_data":4460,"sent_data":4422,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":2,"received_data":8566,"sent_data":962,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"encore.scdn.co","ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-20","domain_rank":53494,"first_seen":"2020-07-15T14:12:23Z","last_seen":"2026-01-01T08:49:41.670482Z","alert_count":0,"request_count":3,"received_data":461788,"sent_data":1682,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"open.spotify.com","ip":{"addr":"151.101.67.42","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2006-04-23","domain_rank":203,"first_seen":"2012-06-04T12:41:14Z","last_seen":"2025-12-30T12:48:09.937076Z","alert_count":0,"request_count":1,"received_data":32731,"sent_data":585,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"o22381.ingest.us.sentry.io","ip":{"addr":"34.120.195.249","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-04-07","domain_rank":78929,"first_seen":"2024-05-16T10:12:52Z","last_seen":"2025-12-30T20:05:11.372406Z","alert_count":0,"request_count":1,"received_data":522,"sent_data":648,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":3,"received_data":26202,"sent_data":1640,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.wellnesswisewhispers.com","ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-06-03","domain_rank":0,"first_seen":"2026-01-05T13:55:16.440661Z","last_seen":"2026-01-05T13:55:16.440661Z","alert_count":4,"request_count":1,"received_data":208301,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"apresolve.spotify.com","ip":{"addr":"35.186.224.24","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2006-04-23","domain_rank":8228,"first_seen":"2013-09-30T17:51:11Z","last_seen":"2025-12-31T00:57:38.372969Z","alert_count":0,"request_count":2,"received_data":1488,"sent_data":938,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"image-cdn-ak.spotifycdn.com","ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2019-09-11","domain_rank":18223,"first_seen":"2023-09-15T11:05:30Z","last_seen":"2026-01-01T13:27:36.991345Z","alert_count":0,"request_count":1,"received_data":19608,"sent_data":491,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wellnesswisewhispers.com/","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc0923c33f2f758c84c52fbb61c834a3","sha1":"b058be2d1733bff3d424d94ace699f13151e3df7","sha256":"d37ef4938c8ae1d3621058c0b807b594bdff045977dab405590883e514289ac3","sha512":"428f2cdc01d9aa9d3dc8ed5a91cbbc7bc7f1e0e05118f0d8a5e817f78b4348022cc0f7219d8362cd7295faca28e22392b2766cbeabb3b65d2387366e142294eb","ssdeep":"","tlshash":"f4d0c77df0585e5020c2607fb471a016521791b9bd941130d75ebc49ff08be546afeeb","size":215,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T18:32:51.705738Z","times_seen":19971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","fqdn":"open.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"151.101.67.42","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"cbf89f93643bde77f1a42b20b7aa4b20","sha1":"0a149ced46b0df0a7106b46d2c013b787e24d389","sha256":"d797c2255ede2cfbcaf8829f073737154e2d44a574e9515dd10a02218835afd8","sha512":"9cb0a7f09706264d23a46d6e04d89824fe6cec6c4f0d7e8a2c72adaca8f587ce8b0e2ec2fc3210e4d7c25627cbcfae4af163fde9f31347492086b36111030177","ssdeep":"","tlshash":"ab9002a931c2e0009a533364505f18cc5074c47024854981845494a15c65024521a85c","size":47,"data":"","first_seen":"2023-04-12T06:31:27Z","last_seen":"2026-04-03T17:34:11.064685Z","times_seen":15189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/main-0743b49c77669cd1.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7246b74633e990e2f41ec9efefb8948a","sha1":"a23cea4cdd1690c94ae33e7597787d031bfe06fa","sha256":"09971a14520e47f8b01c262a0b66e8ed40de5a25852b3a14470a7e4816d1ca48","sha512":"64019f6a700f33239467f1a7acab25ebdc3aa7f00df5b4f24317804cb89320861a2ce197ae0ac75f8dbff5636d36fd23d43e762fa48d599e0d62ab484c096644","ssdeep":"1536:yGIRtwInBIfDbwO3/cKOTPHyZpPdBSuHwpFLZeiUzJ4BVfwBH:y7BIfDUO3/8HyZNdBALZeiUeb4Z","tlshash":"5ed31ab672d1fda203c741d8843b0006f3695cba106e6095b3e6dcd6b894d9ea0f6f76","size":135034,"data":"","first_seen":"2025-12-30T20:21:42.214913Z","last_seen":"2026-01-05T13:55:23.776923Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/7791-ce6c1349d83d2cb8.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c3619be6c492fb5f48a6c3dfa54d20","sha1":"4dd6d6b48a61e14d8287104e3c53947618deab3a","sha256":"ba80aadd8c2411ecc7d6cbf77deefde885a701185918dfa17cb624d56a8d2479","sha512":"6a2351a57e3a239bd612abf252a5863e956b6088e86820a7f703634ac61e066cd96717df42f0bf75cb0f35cbdb15fb3e28ce8bb00ecb576d419b1b381b23fb6c","ssdeep":"384:YxqjRC/agVSqlVjpJOho8sNEHJM5xqHwwUP4r6/ThS:xC/aozK6RPu","tlshash":"8a42da85715578741bbf507e907f0101f27a2419c396f820ba628bf911fa8edb227b9e","size":12740,"data":"","first_seen":"2025-12-29T12:11:09.426785Z","last_seen":"2026-01-05T13:55:23.75029Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/2a6fad7b362d2c2655906853f4302fb2.js?ver=02fb2","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bc5730b5e4b88d15248667f074d33b8","sha1":"63692922655a7082f593147b739715a9be0ded18","sha256":"aa95f47373c4bbd3c261adbcab308fe22452faf01f1d7131186f667fa9de0d1e","sha512":"5b374123ee605dfaafca13e2bc1518b30ba3e81c631ce904faa51c9efd020b6e2703e8b50f4eb580ab0483632d34f8160e4386f5ff08ea0d51bae950f2178ce8","ssdeep":"768:SIqD7GzOml+D45YMJR3/WVtCNIsxzRJjvT4Nptf:OfI/WLkIazRJQNf","tlshash":"58d209a973511636a89ae0a1587f16476ebf30155684cc8cb87ecdcc0fececaa1b5734","size":29501,"data":"","first_seen":"2024-09-19T22:58:52.735619Z","last_seen":"2026-03-27T09:42:39.889946Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/5bba9555edeed6617337b5f42f68c17f.js?ver=8c17f","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"73a6b577594b17d246adf4dbf52eb2db","sha1":"7e4ea270c3f3d71f4d70976afc18cf0db663953c","sha256":"7f5a92f5c821c13aee51236faccf797809dc8fe6ff095437d5cf5c2806d8c92c","sha512":"e47b0abbcbc6693153c59055194e28d3bc3fffb465bea8f4151221b3e1c058743d197212f0eab8ee61d776106adc1183bc8bbd26f9cf70d8b2e47f7f2106e7c2","ssdeep":"768:R9INGd5vuFHd5ZAYznYCVsny+Bdfe/75lr/MGR:R9INGd5vuFHd5ZAYzYCVsny++5qGR","tlshash":"c0b2d98d759570164e9630f5908ba64bb0b619646009f07cb6f8e8d2aef8fcc507bf78","size":25048,"data":"","first_seen":"2025-10-23T09:52:08.897575Z","last_seen":"2026-03-08T10:47:46.965539Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/pages/playlist/%5Bid%5D-ac88cd2b208afe1a.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a316fc721da7f98305fe05a1aef60ee1","sha1":"23c05f9b3d639541c8a7dee20289dee419fdd880","sha256":"cb65a0e748a176d75dd83f53ddab1b2a85c2bd6254a9ef2f4588dc0e19afdda8","sha512":"7290ce4064f2fba0735b40d4b2073829e466571107b048462709ff58e1ded86345f6dbfee913aa5510ecf4c2ec72f226ee68ae4f935b60da4783da8b99729ba7","ssdeep":"","tlshash":"bf21218411f079aaa2ab15dc8137420a7159193f16499a73f3684cbd3ab9dc94621fcb","size":1191,"data":"","first_seen":"2025-12-30T20:21:42.240584Z","last_seen":"2026-01-05T13:55:23.756589Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d72b80690ba108f701c1b1a5e697720","sha1":"befbf4e1dec83cfd6b3a327a909be07a4f8ab490","sha256":"0d8bef99a34b9446ad386668c9742d804417dad6f930213a1dd1cbb8dacbd6e3","sha512":"7cc76f2ee11c4395caa4a50a63bbd1668733e4f8ba3d89189a8014364a7e93873434b7b7b7c7ab37f624d4558e064d913657c064dcc9b35f892a0f05e0991130","ssdeep":"192:q6e4j3qVXlu798fbuEO4C5/hsNs35PhSkzISM8Z:bel29YFts/Swau","tlshash":"62f153497542b57f393b7071d0af220b313970a3a84b4861e9b8f6d87c789792a23d7d","size":8109,"data":"","first_seen":"2025-07-25T05:28:04.240916Z","last_seen":"2026-04-03T18:32:51.706316Z","times_seen":16204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad81beb0a28e87fe3ce3742823d264a8","sha1":"f0aa1a71cc5d0b2b40e1b009486fc627f7703878","sha256":"10531cb9ccd59383133c85843a19c55ba0a27d1a2eb912628e9bd7f68b479aa5","sha512":"ed7834311ae7828b03aa5a7411e9f4bbf5066879ee89fe01f83fa28d1a299733d0a81eea1cc4ab97477bf80c13c5ecf94e398d95c3bd3a2911d480b651c6fb78","ssdeep":"","tlshash":"9131ee7df5291636095661fde399e341a030f0dadc428424efb5cc5ea8cce9548abdf2","size":1717,"data":"","first_seen":"2025-07-25T05:28:04.194173Z","last_seen":"2026-04-03T18:32:51.70914Z","times_seen":10887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ2NsZWFuQm1pRm9ybScpLmFkZEV2ZW50TGlzdGVuZXIoJ3N1Ym1pdCcsZnVuY3Rpb24oZSl7ZS5wcmV2ZW50RGVmYXVsdCgpO2NvbnN0IGg9cGFyc2VGbG9hdChkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnYy1oZWlnaHQnKS52YWx1ZSk7Y29uc3Qgdz1wYXJzZUZsb2F0KGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdjLXdlaWdodCcpLnZhbHVlKTtjb25zdCBhZ2U9cGFyc2VGbG9hdChkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnYy1hZ2UnKS52YWx1ZSk7Y29uc3QgZ2VuZGVyPWRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdjLWdlbmRlcicpLnZhbHVlO2NvbnN0IGFjdD1wYXJzZUZsb2F0KGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdjLWFjdGl2aXR5JykudmFsdWUpO2NvbnN0IGVyckJveD1kb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnYy1lcnJvcicpO2NvbnN0IHJlc0JveD1kb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnYm1pLXJlc3VsdHMtYm94Jyk7ZXJyQm94LnN0eWxlLmRpc3BsYXk9J25vbmUnO3Jlc0JveC5zdHlsZS5kaXNwbGF5PSdub25lJztpZighaHx8IXd8fCFhZ2V8fGg8PTB8fHc8PTB8fGFnZTw9MCl7ZXJyQm94LnN0eWxlLmRpc3BsYXk9J2Jsb2NrJztyZXR1cm59CmNvbnN0IGhNPWgvMTAwO2NvbnN0IGJtaT0ody8oaE0qaE0pKS50b0ZpeGVkKDEpO2xldCBzdGF0dXM9IiI7aWYoYm1pPDE4LjUpc3RhdHVzPSIoVW5kZXJ3ZWlnaHQpIjtlbHNlIGlmKGJtaTwyNSlzdGF0dXM9IihIZWFsdGh5KSI7ZWxzZSBpZihibWk8MzApc3RhdHVzPSIoT3ZlcndlaWdodCkiO2Vsc2Ugc3RhdHVzPSIoT2Jlc2UpIjtsZXQgYm1yO2lmKGdlbmRlcj09PSdtYWxlJyl7Ym1yPSgxMCp3KSsoNi4yNSpoKS0oNSphZ2UpKzV9ZWxzZXtibXI9KDEwKncpKyg2LjI1KmgpLSg1KmFnZSktMTYxfQpjb25zdCB0ZGVlPU1hdGgucm91bmQoYm1yKmFjdCk7ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ3ZhbC1ibWknKS5pbm5lclRleHQ9Ym1pO2RvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd2YWwtc3RhdHVzJykuaW5uZXJUZXh0PXN0YXR1cztkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgndmFsLWNhbCcpLmlubmVyVGV4dD10ZGVlO3Jlc0JveC5zdHlsZS5kaXNwbGF5PSdibG9jayc7cmVzQm94LnNjcm9sbEludG9WaWV3KHtiZWhhdmlvcjonc21vb3RoJyxibG9jazonY2VudGVyJ30pfSk=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8b746fbf4f32ff6f61ff48d5b75f43e","sha1":"af7569f124d9cb116ea7ed7d1b99847ef02ed87e","sha256":"3cb1464a75a3f5ad5090c38d53b12b2d80c5ef1a7f9d6a7430fca210ee192f6b","sha512":"e11df3419f88df4944d0bacce402a137acfe17aef9b85a4dea21fa1fdd804dbecdb4a9111375225fc1d7ef3cd3c46cabb54b02ab72df6bc84ccef422fd4b6ac2","ssdeep":"","tlshash":"b32178e335e664b40fdf2ae7242447dd7c22d49a3e22d1819d1c04716826fd2203eb93","size":1196,"data":"","first_seen":"2026-01-01T05:38:21.862252Z","last_seen":"2026-03-08T10:47:47.012849Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,cmVxdWVzdEFuaW1hdGlvbkZyYW1lKCgpPT5kb2N1bWVudC5ib2R5LmNsYXNzTGlzdC5hZGQoInN0ay0tYW5pbS1pbml0Iikp","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"00cabba678cbfdcf0097a4c7dc409ad6","sha1":"4c9896fa771ab2012785b60bc0a2f268ffc8ba94","sha256":"8f04f358dad0166dce63dfc2fd072047ceeffb85384abfea8147ba794aa3fbec","sha512":"2e8b21345e9082e097adee77bd2bfb862814b1be592bd3b2f354b7bdd995bd63f7ebc7571331c368d0d6bb628abc43d7c6c2637ace3a2ebeac03822566f38790","ssdeep":"","tlshash":"21a0118000a002b3820a0aa00c880280383a28003202003820b8a88ec2a088a0a02aee","size":72,"data":"","first_seen":"2023-03-10T04:37:35Z","last_seen":"2026-03-30T05:34:02.824463Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/6397c389-e0d0-466b-9e82-7ea197772a1a/_ssgManifest.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-04-03T18:30:29.61758Z","times_seen":202879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"341310eb83b65e8101f5b243a7b5cabe","sha1":"568111ad692a7ab56ee764f89caa33e2af53f06b","sha256":"cbf0631d66947311d3ec4af2e46d3c92e007e30efaa5cb0ab56016462aedf01b","sha512":"4857bfe054984e88a8c2d8c181a03ced213b2b4883766d13c56d3ffb33a9cf1008c9b70ad1f8fa09164dd4e11993cf0447b2baf5b43bd1179fcd9e8140882762","ssdeep":"","tlshash":"2141af72c55d57ab0bb562d2580a3548cb73e077cd8586d4e6fcc81c42b8d3cb11f54a","size":2372,"data":"","first_seen":"2026-01-05T13:55:23.797541Z","last_seen":"2026-01-05T13:55:23.797541Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cad34e7e9fdd4a48eadc4113efbccee","sha1":"f9f372f9578b2b4493876b4419107bf6f95c2986","sha256":"b053937d4d0e16f9a5bbc8b7d75bf600d6f8ad822be68261ccfa46af80f36b56","sha512":"7cdf6cba886fc506a2b1e15cb6ac1f244b9cdc731432300fd7c54d89012f55a645572e62e66d4a49e71968db589b0b51f0e502c1e5d7139380a1fdbf9cb2dced","ssdeep":"","tlshash":"aa21143dc73f244b845782823846742299f55799bf41dc4973adac7a33c5ddc504b20e","size":1366,"data":"","first_seen":"2026-01-05T13:55:23.79846Z","last_seen":"2026-01-05T13:55:23.79846Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/themes/blocksy/static/bundle/641.656abb12c469e8c7581a.js","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2785b48e6bc97f705c6872b5763ed7b","sha1":"348f94b2e97b93e981df255512bf3133ae137653","sha256":"7a686490ecf8ab8ade4e41a50db57c8e1d5cff40eb5e5da5ae18eb576988ad8c","sha512":"af0c9c614c7bf768fc4f73ed44763aa4311221d9bd6875c1936b11ac0a2605c8771e408a4296d69bae323018033cba1a6cf6a25822bea80318a3bd415a3334ca","ssdeep":"","tlshash":"19d02e08b0e3b04802ee34e4e07ba89a2aaa2455530c02d0ea8a98c4193430e18a2b8c","size":249,"data":"","first_seen":"2025-11-01T03:58:21.721561Z","last_seen":"2026-04-03T16:12:35.92599Z","times_seen":655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/956ba4ca-0c87f12d5cae4c6b.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"05f90c21507ac742f3edd8be65ab7d79","sha1":"5d04b6fe87d32ef356293f7e2359047303d54495","sha256":"c1c9b95040410cdcda455fae3a35de0cf733fcbbc15690bc15b0f0e0f95537c7","sha512":"b18898cd0ecd460238a023f31406dea63c7528b4fb9f30ff9683b618b2f41ac156e2859c5e0f6c985c749eba322bd46e91f80be001f0188f387cf79ef38af7e4","ssdeep":"192:t5LeGH/YpydyOIfb8NDfAA2fb8NDfAAZC1GHMhNhbGHEMzlydyOXFR0SebeyMyOs:kfbATAA2fbATAAA+G0mj6","tlshash":"080246706b5f484dc31599ba369439c902f1fadcf4c65aaa505ec471b2d8c302b6b36f","size":8748,"data":"","first_seen":"2025-10-02T20:11:27.562593Z","last_seen":"2026-03-24T20:36:38.210505Z","times_seen":1096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/6397c389-e0d0-466b-9e82-7ea197772a1a/_buildManifest.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"22dff2cbf11eac61cb9ab26cb7ebc594","sha1":"5fe53a0e4de89c64eebe89c420d0e10aa57502df","sha256":"15f4f239d09f380bb10a45291fb50993a68ec79e8310bf8eb2b19ec24d661f7c","sha512":"b836b30c4346a423b4cb99313c678c83cc8d4d02a61a36f318fd5eff383643d322c88b44331cf16541ac3b83f62a605fe1bf8ae4dbb1648469979ce17a1663a9","ssdeep":"","tlshash":"755130430099fe031db0dde2753b2322a6829973e1781584f3fd8e3901f255e2b6b5b6","size":2839,"data":"","first_seen":"2025-12-30T20:21:42.230423Z","last_seen":"2026-01-05T13:55:23.750726Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/3744-4aca194bbf233695.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ad610b63c6bf76fc728cb647cd21a93","sha1":"e77301179a5f1608ace61e846d9198c725eb4636","sha256":"e86d1f7656f745787183c06cfefc3a74d87045d43936bcfa18f55d0fbb08947b","sha512":"f03e972051863fd0843d78e8a540b1473efeafa55f6306598219552aadecd47f8cbb8a12bedfcf50c185a87b1c39ff4ede373a3ac1f897e86c18b69a2141bcdf","ssdeep":"384:s/BUnNnvFAZX6IVk5ClcngGndTAYesCxfjPCYacCQfql/3l6A8:s/BUnNnvFAZK4e9ndTAYwFCQfN","tlshash":"84a219ea61e495b8f25b848cc56b4814771f3528e26c4ef09dafad3852928fcf307764","size":21665,"data":"","first_seen":"2025-12-29T12:11:09.429194Z","last_seen":"2026-01-05T13:55:23.784101Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/5939-e0875db3050f4e8f.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd0d5af61a387feee17833069d7e6462","sha1":"65f0d04aba898b6deecb4bd4a4f9178930bfe9f7","sha256":"64ad2b0aeb5d55336940ff02447d0111cd22e14f71cc19b7d6bbd72a7e0b3d22","sha512":"06843c60f54db8ca435c70bd91c667b49fb44f8514e6f93ee6b18d66684a7f75f3e8dc11b25d5cc13e703d55d057cab1b58c87198b57e68d5a58e586dacab220","ssdeep":"1536:Z5jkl/y6JpmtzgXteRte5XaTTwTb+sNIGlLD5tt5ZiBq4ahm7X/UH8De69wXLgfn:ECmEte5L+spLdYa07PUNi","tlshash":"a4c31af67041fae89bebc5d9c06f5405b3ad2639194848a4f1b56c5d23ecac87223f78","size":128631,"data":"","first_seen":"2025-12-30T20:21:42.206231Z","last_seen":"2026-01-05T13:55:23.734555Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/3632.4b9b0095313d3587.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"91422dd2426033e6889325fcffd2330e","sha1":"a68ce34104a0fda2fd6aee64c02199a4891adf26","sha256":"801ca8a7060af958aa2c03088117315a84e5a5ddf6f5b5ecc929266c240d5998","sha512":"a55ecbb8a5453b82d28e461f8fc2c7988d04794f65381951b0aecb450fff00f8588266415364f0f2170e87cde86fb49be032fa3cf8ebae6209ccc61d42e1cb51","ssdeep":"3072:qI2o5LDra2RHwRsXvmVmPnXAEso9D1zxxNaKpqiMXXXtzLZmyagJePu+6FJNj9W0:5hZsm/9ttNa4NMZZmyagJePAKVn/VMSY","tlshash":"2f742aa23796e427c786d156b0794503b23d564a240d422cf629fddf3b8e641f3babb0","size":363626,"data":"","first_seen":"2025-12-30T20:21:42.227479Z","last_seen":"2026-01-05T13:55:23.771817Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3fb31fc4a0b37980210c57f2698989d","sha1":"82a161b3a63cf0d5a5b37e9eacdfaf298bcbb55b","sha256":"45200934a32157fcedfec503f25c156ed7a19df9a9538269e7848ad8f1adc936","sha512":"69f23736f39a72a620c7ee834ab1745e31b0289d9724365899af60148af4a28c26c7f2bfd64649776390a2301775e2c5be863604d3c932f264eaf572f0c2b3e7","ssdeep":"","tlshash":"0fe0a330f14849201040c569f274c41110b2ca85dc2aed30f38db818f830989c1b7df7","size":408,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T16:56:48.943232Z","times_seen":14205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-includes/js/jquery/jquery.min.js","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-03T18:31:20.360105Z","times_seen":683620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/3327.b5eda29f110baf69.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"64caa3603876f6ab123556cbc1a27499","sha1":"67186538e4d2172f339ebe83ec0f6fbf9b4c05e5","sha256":"cc477f8201e6f5e21ea72ff5dadfba0f88b766f76fda3be46f3943e2ae9a3954","sha512":"0d62c49b8aa6cad097d9eb72572db10676b1014eef6d9c84206118171572c84281881da369799e298b84f574ec8d9966a8f263cc04969933be332610b519588e","ssdeep":"768:YtcHKEZbv8VNNptd/Lj+3EHI3B+BqfsY3u1pYvQuIhrOcnNY9PO+BrbXC9hrsom1:YtcHKEZbv93EHI3B+BqfsY3u1pX+9POY","tlshash":"6e23d966bb16afb382848252b9355143823c40df51049a287799bcfe2d5cbc1a7bf7f1","size":46629,"data":"","first_seen":"2025-12-30T20:21:42.216351Z","last_seen":"2026-03-24T20:36:38.225887Z","times_seen":508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/e1057c67e2d9918f186009e580af6e6e.js?ver=f6e6e","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbbef0dab55a56cff341036c015ab130","sha1":"722e60e41d4bb02fa1ad116989cf2a0a0536528d","sha256":"ce57158e6c7143a3b635b3dba62f5ad5f1b69cc65a5ee0604faa651748b0a59a","sha512":"44c4335066fefa7a84c4059cdf0e61c96249cea609e646718176c722f028f197483b72463bc7c5847fcfa2ad3ad27f437fc7f82b51aa331b62d8d1d4734ecf9f","ssdeep":"","tlshash":"97a0122ca904fa460c930100607a310833133c62d64ac880031730ac4c2c554b0d3042","size":84,"data":"","first_seen":"2025-10-09T01:12:34.442366Z","last_seen":"2026-03-19T01:36:21.947957Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/57de4abd5f0e6b52ffce9f633203b4c0.js?ver=3b4c0","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9a6c9aa87f935286a9fd2cade83b900","sha1":"60600109a545ab18d75517ed039bae60e0fa6166","sha256":"a9a4b8c80498438194b4392ed703aa76ce9df8a247c0156e2cfb28847ce54405","sha512":"6e42bc8220a7b5a773719503497c994fffe08a9ab27521b1ce400da679a9ae1b423c36ef92b7e32c7f510b46f07a67f16d69664c667a904ba48bc1e943b22e4e","ssdeep":"","tlshash":"3e8161546a907caa52f144ee388fb908a07ddc552b8ca5e8f6099ca24d34b0070ffddd","size":3935,"data":"","first_seen":"2025-10-23T09:52:08.978027Z","last_seen":"2026-03-27T09:42:39.869868Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/2b0bcaa288fae2d85ae62b66cb26d44b.js?ver=6d44b","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"141d704f8305f80172ce960e8a970513","sha1":"ec3cc8cf925f1c5754e7d35a1faa1b697232f8bf","sha256":"2b4012c81408b29b34444cc53ebb32e9ab511225de5bdec17ca6966c19b28a99","sha512":"487291e83ae308fc4dd4338844b2992fdfc771f71a893f2982c1ad08126212a4f812338bfc13cd708af09a181710c7231e60034fec83b5156360d6423d0e1cc2","ssdeep":"768:d2oLNdg5pTFtCdlSDYxiJdcCcCymUGBokOl/NNyTeeUBo479yeYX5KnZprIf/nyw:rr2tBqiJdclJkOZ/LYJOHrA6pf2KHHe","tlshash":"6173b848ba537235427f20e6657f000a3136bb7eb00956a8b458cde86ebdc54726bf3d","size":77240,"data":"","first_seen":"2024-09-19T22:58:52.689942Z","last_seen":"2026-03-27T09:42:39.817493Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/plugins/blocksy-companion/static/bundle/sticky.js?ver=2.1.23","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7b646118c067db854774e30eac5d09d","sha1":"90932ce2103b1e1842d508cc3fa5d2722374be11","sha256":"10d64531f77b217200a4353f8d02636c2c56d24bedc10df6e1977838690a058b","sha512":"bb1579ba30fe3a2a741bccfcba4097919f39d86e9fb592dcd4fac6706ed76885fd568afc1ee03ab456252819a390ef463de665b8767519b44b89e3a4fb0681c2","ssdeep":"192:XTGNm5Rtz+/PP+7MqqWz1vJo8ilewz6tpe3MZD+JBD7mMEcc3:XT6m5Rt6HPKeMho8gewWtpe3MSY7","tlshash":"f732e6743391b435936b35ca8a6f5506b5ab328e74db8054b548cc6b3ce540370dbeeb","size":11650,"data":"","first_seen":"2025-11-14T16:13:01.530278Z","last_seen":"2026-04-03T16:12:35.980375Z","times_seen":809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/framework-0b5b4fa2b4eb5852.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e8acc5e588b498c82300a3a6e3114d0","sha1":"bfba9796f719853dd661a13752ac79ba7cb9c175","sha256":"d5808bb50fa6049acdeba2c0ab5ac2b742ac9590345f773f287ab2b55bfb5e4c","sha512":"438f65ee7694a7b951f8d4e01f482580320e191dc5c4df4a0a44ef10c16d2625ec1781ba6dfa7f2f01aff53f5e1081539682b9f640d7614e83450c3145bb7c30","ssdeep":"1536:VWWoicw71odjmYpt//D8nw78a4EkP3VvBQz8P4+u2T0QCz4pXYlaRoH59YUSUh3c:6ndjHEa4N3Qz8P4+r0QCyTM9Y0iPN","tlshash":"49040ae83955f2526eb312b7009f2803737c262b280d4d60a251fd9eb57845eb17bf9e","size":190172,"data":"","first_seen":"2025-12-29T12:11:09.447009Z","last_seen":"2026-01-05T13:55:23.783551Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/b877e802110bf265833a4f276fb78e4d.js?ver=78e4d","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"887d49cfb7fc8cc44522db57b248e5d6","sha1":"99fff45dc02e29aa4adabd4f5dec382c275cdead","sha256":"71ba6c0939eadb013300431c1dbf7adba812d721d97776e5965eda0151d7ca19","sha512":"7498c68e06f269bee0b352032ce627c86880a499c29d3cc41012e40b701cefcb3232abe8beb8184042bade41c1ad2dc571cd8bad6bfe3eb809446cfbe7854167","ssdeep":"192:OnE77yW+JzWyEEePJWFjiNcCSssplTK8wkk5v:uE7mW+RWyEQFjnlTK8w9v","tlshash":"340245c9711b21e270fe716960efd513a22ff87fea0644a4b69604701fbddb96202bd1","size":8869,"data":"","first_seen":"2025-10-23T09:52:08.957646Z","last_seen":"2026-03-08T10:47:46.980951Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/6a649523628e8d514bf86b2251b8ff28.js?ver=8ff28","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b9a53d12410924569cb2beb2dd2c8","sha1":"0d1a9a420ff6f57bb1df7aaa169efaa3bfbb0744","sha256":"3489b2da207b716ee96494eeaeb254f575a5f678f4d9183a15954a80c1ecad3d","sha512":"287783a560f90c60eb8e6fffb36bf7bc6e0a00e67614011bf6d4cd1ccdb4004445a1328553890da55612af44499de78f19ae38351b344d9343fa7ea5d4ac9597","ssdeep":"768:3I1Ul7EwygLTqMaNFmicbDkhKl1vzdNJSenTpB812I4Es3mSoMWbkoRgS0LJy:YG0oJr7EsWSDSP","tlshash":"c9e296ceb796f075129776f6a27f724ab73b249a381e4020e124ccd16c7494f8263e6d","size":33153,"data":"","first_seen":"2025-12-12T16:22:29.856787Z","last_seen":"2026-03-07T09:43:00.026383Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/8f3b0c8a7df339b6ae62c329ca261833.js?ver=61833","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa010561ecf35b9d89d699c31dc554e0","sha1":"c51827292714fb4a35472ecfacede69f8e0eb4b8","sha256":"76808539f3da44f7362f18f535f9702503d125bda2601550be93d34126dbb372","sha512":"4e0c0a2c1b2877055b2b2a2427a3bcdca80f46f7b51be9c6cf533c4b1e940e66acbdd548ad8b5dfef72e44ab5d633fed7262660b13aeca4f8e6d177123afd12e","ssdeep":"384:Hjkw9RUneS8zINQQQYZkvzQ8CTYwGuJ5R6HBX5yODynsQoqoqQ5pN5M41w256idZ:HNjjQQYZkvnC5uqmrjyMVz","tlshash":"dfb2c589a12561a162fe12e71cebe042933fd97fed014044a2e54ce65efced12217fb6","size":24070,"data":"","first_seen":"2025-10-23T09:52:08.981268Z","last_seen":"2026-03-08T10:47:46.993934Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7e4214f1fe58d8bf06d77f8dc5e2fe4","sha1":"9f245b4c145654a0cb63fc146d6b3675485809b1","sha256":"7e3e9502070e358358491bb76d8cb2661009d9d8c3bc90420463ea82145f215c","sha512":"32b104e3b20e121a5d0b963a4dfa35d8f39d481aff010f261fba7c8adbaf09e65f36fa27f4bb0a854b0df2a0fee8501ad0642855eb1f74270ad8e44bd34302b3","ssdeep":"","tlshash":"20f09ee7804d65db173976c2341a290655768612fe01cd48e7fb882c96a8d7bc00b196","size":482,"data":"","first_seen":"2026-01-05T13:55:23.799981Z","last_seen":"2026-01-05T13:55:23.799981Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGM9ZG9jdW1lbnQuYm9keS5jbGFzc05hbWU7Yz1jLnJlcGxhY2UoL2V2ZXJlc3QtZm9ybXMtbm8tanMvLCdldmVyZXN0LWZvcm1zLWpzJyk7ZG9jdW1lbnQuYm9keS5jbGFzc05hbWU9Yw==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"48a8feab6cda2c079433a9ce1f7efcf5","sha1":"fb4af348db200150d08bc597c4835852ea83484f","sha256":"52f544efb436c0b98c12641233c74996a57071353d890ad4f2896c4ee45c092d","sha512":"7b760937c680355609fee85a7f432d537ad9205bd24151a9bf2b5a0af16b623f19adc9b76572339800af7f69034c0fc462753094c06de48644ce02970ce5b391","ssdeep":"","tlshash":"7ab092a2348d05f6600e259418dec390393ae0c2fd416800c5b87001d540c550801fd0","size":109,"data":"","first_seen":"2023-03-07T12:59:26Z","last_seen":"2026-03-31T02:05:51.929995Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,alF1ZXJ5KGZ1bmN0aW9uKCl7alF1ZXJ5LmFqYXgoe3VybDonaHR0cHM6Ly93ZWxsbmVzc3dpc2V3aGlzcGVycy5jb20vd3AtYWRtaW4vYWRtaW4tYWpheC5waHAnLHR5cGU6IlBPU1QiLGRhdGE6e2FjdGlvbjoiZXZlcmVzdF9mb3Jtc19nZXRfZm9ybV91cGRhdGVfbm9uY2UiLGZvcm1faWQ6IjE3NSIsfSxzdWNjZXNzOmZ1bmN0aW9uKHJlc3BvbnNlKXtqUXVlcnkoJyNfd3Bub25jZTE3NScpLnZhbChyZXNwb25zZS5kYXRhKX19KX0p","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"60d2044933fa130cfd2cbb30495d98bc","sha1":"878348cae358ad2a44fbe50d1301c28f2d864849","sha256":"e5679d1b70339d812ef4dc6b5c66ba1c3805738b533e7dacacfac0ef6400d28f","sha512":"9b743b5df9ade7d9079ac539aef3819475cfc0de52a11ec935763b65598b313add8fcd7dd9776c31b8f423523a26c3da94312d6156f69b6d158cc774d7591f72","ssdeep":"","tlshash":"b9d02b45fc295189463252c09837a71b217aa600e900c400557210809f20b2dbc17349","size":246,"data":"","first_seen":"2026-01-05T13:55:23.801443Z","last_seen":"2026-01-05T13:55:23.801443Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/pages/_app-fea82ca5b5e5f29e.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"54c598acf98635f72a4bfe9add431196","sha1":"c6eddda0d1544debf15f5dccac10568c299fc13a","sha256":"2740839a7160c5aed7904e77c286bcbdf16d3849b2997ef184eeeb8d85bc976b","sha512":"af9ade6e7f3d1fc4e09a491c7b072ffa4249c4b984c8dc97afc42e85d1aa1cb245e8a4b1c4d3cff3150a1ae41d6277470517caadf272840999a73d3a056898de","ssdeep":"6144:HjPxnOdGf+vceggA4svFTyUZPVBZqq/wPPhJtHDsPvd:HjxG1uoUZPV2q/w2d","tlshash":"8f9429ea7392b03253db4165907b0003f3795a65144d046cf269edef39a888ab2f7f79","size":446694,"data":"","first_seen":"2025-12-30T20:21:42.229496Z","last_seen":"2026-01-05T13:55:23.792903Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/c1ada699b20e23944bebb8a6ca67387f.js?ver=7387f","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"47a628aef2f254c32c3b5878700a42ce","sha1":"43814a498670a432b6a73cc80e67bdc738313ea2","sha256":"ea64f589334f647f2254d595466c036000a3d9150ad078a69eba7f845c0c0713","sha512":"2dad1648412fe67306b86320bc4ba90a681086b4e799528ea9783157fdc1fda64dede2e9e7958d0973156ed3d9084034422ed9c4794bedb5c7b8151917540671","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORl:5rprxaefKI0LP19m4q1WW+h4Mjw","tlshash":"5e52c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13578,"data":"","first_seen":"2023-08-09T06:09:09Z","last_seen":"2026-04-03T17:02:18.625515Z","times_seen":9696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/904856494996aee771d4829f5b11c45b.js?ver=1c45b","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f296866f139ffbd8ec32c90d8ab97528","sha1":"15bb40968916b9c79ef6a21f87148190562cfdf5","sha256":"4c33e35b6d6d04243d60b734f0fdd59e46854e2538592ff3adcafafff4ab48e0","sha512":"1f43b57d6fa94e77f6cdad8419c1f8667ebff9abdcd05df4bf249c91be6ff46d723a8f657e8c739aaa9ab51115252421ca9608b61adff247f55bc115044ebb56","ssdeep":"1536:8PBEi4UCSDXKYqxND3pKQDtZjj3yOdbYfERjj+:OBEi4UHDaYUND3pKwN3yOdbYf++","tlshash":"20732ad43952b1a257e3b0f441fb4406f17aaa6974da8080f55af0d0783deda03b7e7a","size":77231,"data":"","first_seen":"2025-10-23T09:52:08.930118Z","last_seen":"2026-03-27T09:42:39.830595Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/webpack-69006b829e215c29.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"68636f858d2c44df35e3b178ba19efee","sha1":"1d033d5ec8c37f68f51d3eb380d7214c26c9f5a6","sha256":"f504b751289413dde6c7d536c4c04c38b8e0267c892cf97f360bbf45c45153d9","sha512":"611798a6008e79f708c06cde9202b02255bc76270590b9f3d0d34f7eda719e186d6067ab9d1135476b3bff41cf20bdf9c830f1b7e2a572addc4efa3a4854bad4","ssdeep":"96:kPSjy8jlYqFcHVvJSNaLgrF2vHGhpl/wjDsVIqVJvpSGFGszBbFONVsRD3:IkpeCOSNa+Fvhpl0sJrpksNbQsd3","tlshash":"bdc108a933e8fcba366101c2243e8255f51424372559acf0e396dc7e7868ee24675fb2","size":5864,"data":"","first_seen":"2025-12-30T20:21:42.249255Z","last_seen":"2026-01-05T13:55:23.790305Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/2783-94d8ae9a1adef60c.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9741f4876d0c80e1066993e459df8366","sha1":"1dacab026296c8e76731613c428a3ea338539b76","sha256":"79e855c2598e4d6c4da6249dae25c34e119280aea87c961c4e05912365a21d15","sha512":"78fc5697ca11cf4f3d06d37b758693f1fbb40e0a8072a7a8b8d91c2afa5879ab6b3c44005fbcee4fa3b1f0f7df92e6078173a9874d21ce611f6b4a3d9011eb00","ssdeep":"3072:LdPwVgF+ppYQO8emN3NpnQ2oY8ZGk13vB8hBW7k3YiRKPS5lgjQEf2gflTz7Np5X:yykiQOdfGZBAkd1+jxN95bL5/Ma8HXQ","tlshash":"788439c97292f071539381e9503f140bf33e6969684c8428f7a5dce66cba88e8277f75","size":390958,"data":"","first_seen":"2025-12-30T20:21:42.210105Z","last_seen":"2026-01-05T13:55:23.779051Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/spotify_player_o.79c145df8364624f.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"71a03d5b38d87ed665a6a7a39de08c77","sha1":"b89f0be9230600052731f76ef2c0e6bcf3379414","sha256":"4446be68760fdbe8ce258649a71c7e78f039c04af4dca45bc3577a9ce01380f4","sha512":"4fbd163176c086dadd16f741887e01fb2d40fcc81cee12ae8eb8d296bf37e800a3cae8301bbbc72e1232d73de470577d147d8e4d7642b5b71a7828ff677fcb6d","ssdeep":"192:dK5tHlb+JPRiJkSd9utWbVos4siPKWC5knZw726M3x1n:utx+RttWbVos4shWek7dD","tlshash":"81321af516696692da77a0a4d01f0606333c9f2b3a1dc335f767ae0e10dc50a1ef9e94","size":11773,"data":"","first_seen":"2025-12-30T20:21:42.217521Z","last_seen":"2026-01-05T13:55:23.781098Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/bdb53720-118a259f23343d3d.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa417f4055ecd6144508e6c0ebba748d","sha1":"0d945eed852a79535d2fc6103ec3a35b0b4bd777","sha256":"2c5bdcce619e1946e463d5e3842d336d6cfc6b34741959142340c81ee3d2b0d7","sha512":"1dfde4a4368c8f584014f0b79d3984b2dfb0a30c94f44fa4b144dc95d73343dc527dec9b2c9b2cd3eb316a4b8b7643565c9b4b266431e301ce70f75b9fd3dbc5","ssdeep":"3072:CbJid/j7qo5JASfjji4Wb20zgV3RbGpLsev6ns7BkfAUwrsraTXWtIGT:9/1fkkXCNvms9kfA/S5tf","tlshash":"a5640984f764b021835a66a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","size":325840,"data":"","first_seen":"2025-12-29T12:11:09.447894Z","last_seen":"2026-01-05T13:55:23.746544Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/css/3c7ee73adfe0d363bfd5a9de8eeec98d.css?ver=ec98d","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/css/3c7ee73adfe0d363bfd5a9de8eeec98d.css?ver=ec98d HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"518-695bbdcc-1413df;br\"\r\nlast-modified: Mon, 05 Jan 2026 13:34:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 450\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1304,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1304), with no line terminators","md5":"09422c5358ff9757ba8a5c32f6bdf017","sha1":"1e4d58332acee560217feb67934b81e9a0985c00","sha256":"bd89e15f76c0d846081bf076309007a7cebe9f8ac946608a04ea26e8ccf33b94","sha512":"b8b62e3fd15fc644c67ae6c073761bbe46c84afc95fb3c908a6c7b91a639bbb94ddb09f008e2e75742affa51a98819eeec1d008bf1d0e0319dc890b5d8f556f8","ssdeep":"","tlshash":"41218c3a0461f27c1da6e73ceb9c3724d393f172928601d5e449d212a4cd2be39b568b","first_seen":"2025-11-17T03:22:08.310773Z","last_seen":"2026-04-03T17:49:16.884058Z","times_seen":62,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/marcus-thorne_avatar_2-30x30.jpg","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/marcus-thorne_avatar_2-30x30.jpg HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"457-69501003-a3b92;;;\"\r\nlast-modified: Sat, 27 Dec 2025 16:57:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1111\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1111,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 30x30, components 3","md5":"69c55ce03e1ed8f2f8cc4a87b2791b2c","sha1":"cdc70541f4e604c86db493d29808c4ea2b1e99bd","sha256":"ebe95f24c585cd747ae7a7a002853a7ad2f1383f2261a9fb334b344f36d9315c","sha512":"6dc647e5c21fb21ed7aadef8ece1c6f926adff665e768f063ae1dd48b146e6543869620e9d8833861f232185b5507cdd11a2aedf835ad8baf4cda6badfe5967f","ssdeep":"","tlshash":"2021a86f2b520291fe169dbe5cc115e9e1cebc40bd78ab887fb0c5b2c360ad8585464c","first_seen":"2026-01-01T05:38:21.832635Z","last_seen":"2026-03-08T10:47:46.964867Z","times_seen":4,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/icons.svg","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/icons.svg HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"28eae-694e651d-a3c5a;br\"\r\nlast-modified: Fri, 26 Dec 2025 10:36:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 59869\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":167598,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e107408b5e9e2358caca704ac80af80","sha1":"e972cfe7024fcedb4967778bc9baf5c238a8706f","sha256":"d2fdac954a9a8433ac04ac4859634a7cc51baeee196a28d85f165403636cf3f2","sha512":"17f9714e64f47cebfe7cc22981f4ab8262c3c6905f19d182f495ab7e0d13243d4a6509c87a1537f8c10c87f2ce19f6bc87d227894f50c150cd15d0bb13875228","ssdeep":"1536:a8hNUYielENh5p52IxC8UVFm/DoFILShS5gqzaXc506aT7xjIl51eaSvKOFhS/Z/:VH4NRss24qwWgyT6bHms","tlshash":"3cf374ed2ff643d4e8ca8b065f1ee4663faa14e677994580740e27d1bb07c88d986f40","first_seen":"2026-01-01T05:38:21.834426Z","last_seen":"2026-03-08T10:47:46.925767Z","times_seen":4,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":382,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/themes/blocksy/static/bundle/641.656abb12c469e8c7581a.js","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/themes/blocksy/static/bundle/641.656abb12c469e8c7581a.js HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"f9-694da784-a39ac;gz\"\r\nlast-modified: Thu, 25 Dec 2025 21:07:16 GMT\r\ncontent-type: text/javascript\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":249,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"f2785b48e6bc97f705c6872b5763ed7b","sha1":"348f94b2e97b93e981df255512bf3133ae137653","sha256":"7a686490ecf8ab8ade4e41a50db57c8e1d5cff40eb5e5da5ae18eb576988ad8c","sha512":"af0c9c614c7bf768fc4f73ed44763aa4311221d9bd6875c1936b11ac0a2605c8771e408a4296d69bae323018033cba1a6cf6a25822bea80318a3bd415a3334ca","ssdeep":"","tlshash":"19d02e08b0e3b04802ee34e4e07ba89a2aaa2455530c02d0ea8a98c4193430e18a2b8c","first_seen":"2025-11-01T03:58:21.721561Z","last_seen":"2026-04-03T16:12:35.92599Z","times_seen":655,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/css/1eb63079cbcca8c5.css","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/css/1eb63079cbcca8c5.css HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Nov 2025 16:55:49 GMT\r\netag: \"0b811014fa959444d367e331d1222b9c\"\r\nx-amz-meta-goog-reserved-file-mtime: 1764261965\r\nx-amz-checksum-crc32c: mHpMfA==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncontent-length: 21168\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162956,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (47918)","md5":"0b811014fa959444d367e331d1222b9c","sha1":"78803e0c5b669daaf2d46e6b90cfd2a565545ab2","sha256":"4075f063007a3933dc247ba820396ed4ba743264276a3bef4fdad3fe320c835e","sha512":"8a5b2ebc51def0aa8353599ca4996ecee47fdcf74225d1a071beb17a3e70f2eaf3806b8d9034c39e3ded4730e36f13cdf2564b8b5713fdd5b0556a0a94fbdfb4","ssdeep":"1536:dd1X4ZXGBKOhvEKREUnLaRh9QTiqFMCkd3OEcOESOJOgOW:dPXYGBKQu2uE","tlshash":"73f37095c241963cad23397e72d8704c87287c038d627deded2442fb5acfafa216651e","first_seen":"2025-11-27T18:07:33.821073Z","last_seen":"2026-01-05T13:55:23.733937Z","times_seen":294,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":238,"dns":210,"connect":1,"send":0,"wait":19,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/5939-e0875db3050f4e8f.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/5939-e0875db3050f4e8f.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Dec 2025 12:12:16 GMT\r\netag: \"cd0d5af61a387feee17833069d7e6462\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767096024\r\nx-amz-checksum-crc32c: HgZ8qw==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncontent-length: 36980\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128631,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"cd0d5af61a387feee17833069d7e6462","sha1":"65f0d04aba898b6deecb4bd4a4f9178930bfe9f7","sha256":"64ad2b0aeb5d55336940ff02447d0111cd22e14f71cc19b7d6bbd72a7e0b3d22","sha512":"06843c60f54db8ca435c70bd91c667b49fb44f8514e6f93ee6b18d66684a7f75f3e8dc11b25d5cc13e703d55d057cab1b58c87198b57e68d5a58e586dacab220","ssdeep":"1536:Z5jkl/y6JpmtzgXteRte5XaTTwTb+sNIGlLD5tt5ZiBq4ahm7X/UH8De69wXLgfn:ECmEte5L+spLdYa07PUNi","tlshash":"a4c31af67041fae89bebc5d9c06f5405b3ad2639194848a4f1b56c5d23ecac87223f78","first_seen":"2025-12-30T20:21:42.206231Z","last_seen":"2026-01-05T13:55:23.734555Z","times_seen":50,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/cropped-36c99bf8-4321-45a7-b16c-5dbe65719d72-removebg-preview-192x192.png","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:51.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cropped-36c99bf8-4321-45a7-b16c-5dbe65719d72-removebg-preview-192x192.png HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:51 GMT\r\netag: \"43c6-694fee3e-a3c46;;;\"\r\nlast-modified: Sat, 27 Dec 2025 14:33:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 17350\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"1f6ec341c0e790081a6dca3b232391c3","sha1":"b26a218e0bd7c67812ed586c358d9e5a2c78cf0c","sha256":"9d9d9b5a4ea2a5e442acb4a60fd9c27b456c3361a214adf4c3e8b895dd5d6c12","sha512":"2077e56c868b4c7877586407de4172f61e90e5377ee3eb82362c4288f877e2ce97acde54f9f95eed743563483a49ecd9f4a8f5b5965c48c4dff53bf6f465974f","ssdeep":"384:CzI0K57CWrjsQ33ai2Zh0Y3b94u05k8DswasliwbpayUkhNiS1:cK9Cu93BW0A94uYNgwa0/Y0","tlshash":"6072d0c4e227013317a0713fca48d26b042a0a777424e25efd5993321ea2b5d9db97fb","first_seen":"2026-01-01T05:38:21.844573Z","last_seen":"2026-03-08T10:47:46.999874Z","times_seen":4,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events","fqdn":"gew4-spclient.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"35.186.224.28","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:56.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotify.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:96:7A:CE:E4:F6:90:B6:56:41:63:72:FB:64:09:A5:1C:55:D5:78","sha256":"D2:59:C0:71:B2:2E:E8:45:23:E7:B2:56:E4:B0:13:AF:F3:C7:B4:F2:5E:ED:B1:AE:B5:A8:2B:93:58:8D:63:C6"}}},"request":{"raw":"POST /gabo-receiver-service/public/v3/events HTTP/1.1\r\nHost: gew4-spclient.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 659\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":659,"data":"{\"suppress_persist\":false,\"events\":[{\"sequence_id\":\"X68fwiU9pv/+AdYtVlCJCQ==\",\"sequence_number\":1,\"event_name\":\"EventSenderStats2NonAuth\",\"fragments\":{\"context_sdk\":{\"version_name\":\"4.0.3\",\"type\":\"javascript\"},\"context_time\":{\"timestamp\":1767621296287},\"context_user_agent\":{\"value\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"},\"message\":{\"sequence_ids\":[\"X68fwiU9pv/+AdYtVlCJCQ==\"],\"event_names\":[\"SemanticMetricClientNonAuth\"],\"loss_stats_num_entries_per_sequence_id\":[1],\"loss_stats_event_name_index\":[0],\"loss_stats_storage_sizes\":[2],\"loss_stats_sequence_number_mins\":[1],\"loss_stats_sequence_number_nexts\":[3]}}}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncache-control: no-cache\r\ncontent-length: 13\r\naccess-control-allow-origin: https://open.spotify.com\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\naccess-control-allow-credentials: true\r\ndate: Mon, 05 Jan 2026 13:54:56 GMT\r\nserver: envoy\r\nvia: HTTP/2 edgeproxy, 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b607f4913eec1d8a316cac593bd4a8e8","sha1":"daa906a2c39d6cd6ded7799f6861d1a487901bbb","sha256":"debf84af8d66827e1cbc6791aa686504e3116d8cb20f4697fef23108333061f8","sha512":"70258f0bb3c6bc339a954528515deb8a2f5f0d547592c5495efbe0b4fe55c8d267f29ac3b3dfcc7929555c3b8211bbf03f3cdf24e76334500e81d4cc7f1b231d","ssdeep":"","tlshash":"346000000cc000030c00000cc000000000c00000003000300c0300cc03000000cc3c00","first_seen":"2023-04-06T07:35:35Z","last_seen":"2026-04-03T18:03:45.396029Z","times_seen":46010,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wellnesswisewhispers.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 19:56:18 GMT\r\nexpires: Thu, 31 Dec 2026 19:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 410313\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-03T18:31:24.160929Z","times_seen":202833,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":124,"dns":1,"connect":7,"send":0,"wait":11,"receive":1,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wellnesswisewhispers.com/","fqdn":"www.wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T13:54:48.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nx-dns-prefetch-control: on\r\ncontent-type: text/html; charset=UTF-8\r\nx-redirect-by: WordPress\r\nlocation: https://wellnesswisewhispers.com/\r\nx-litespeed-cache-control: no-cache\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-length: 0\r\ndate: Mon, 05 Jan 2026 13:54:48 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":207748,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":903,"timings":{"blocked":356,"dns":122,"connect":114,"send":0,"wait":188,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"www.wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"www.wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"www.wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"www.wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T13:54:49.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-dns-prefetch-control: on\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nlink: \u003chttps://wellnesswisewhispers.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://wellnesswisewhispers.com/wp-json/wp/v2/pages/649\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://wellnesswisewhispers.com/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 35523\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":192411,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23281)","md5":"ec17db1ab22f7d79bdbc01c5ce27c25f","sha1":"8499fdc8f341982ba085cb3ff0602cac2fc8f3c0","sha256":"342fb991967afc62273bbc70d823bdd3afa5a8e5bc2c4cb97ccffc0362c0397e","sha512":"a60649829531c014cd2d8adf9de03be6438644758e5f374f3520b875617430e1e7029fcb779f72831eab989186c92a485dca8b83baf169d5bc1c1de58fa4bbba","ssdeep":"3072:iRsDq0VA0cAIUNeH33HoYoqs1JiCCAXukJ6bh:xq0/qo0AXuLh","tlshash":"a814d773e16c00aa766f439cc45137ecb576d407ce0249d4b2fce2a8a7ccdb659a274a","first_seen":"2026-01-05T13:55:23.737718Z","last_seen":"2026-01-05T13:55:23.737718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":237,"dns":3,"connect":114,"send":0,"wait":114,"receive":115,"ssl":118},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/css/8450c548474077259aaf6e216ce67dcd.css?ver=67dcd","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/css/8450c548474077259aaf6e216ce67dcd.css?ver=67dcd HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"5934-695bbdcc-1413d4;br\"\r\nlast-modified: Mon, 05 Jan 2026 13:34:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 3022\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22836,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22836), with no line terminators","md5":"f8d0cce92f583df36a502d0ca0a57f6f","sha1":"a3d106d7124676ccf479fc493363fcca1c542c19","sha256":"f5d728a0eb992eceefccd398a564702569652c65980c335fd919e1e95c55a990","sha512":"3095f52e1c40448b67fdb03938f1fae070f2f5f304fe8a90d5f2b8276b78d57a5dd27f7a213c8f2db852ffd3303d9c9c904fc973f0bb7e0fe9e402deace162d0","ssdeep":"384:XSKSMSUSzSCSzSTSgS6SlSsSMSoSnZS+SjSKSNIZOFDgLEiZZL2h9bEtZTG3ywpZ:C1z7ONOuXlMTzfnQp+1uG3ywpkbfZS7p","tlshash":"a3a26162b97d6027642b65b9e0ccad6a9f11f881a7e53ad0fc0d80c3f4d52a77509b0f","first_seen":"2026-01-01T05:38:21.752963Z","last_seen":"2026-01-05T13:55:23.738635Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 13:54:50 GMT\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5993,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9c51d4ed0528132b3a6be429dca636b5","sha1":"18cc681e66f5b6696a4ff89774e53aef2a51af00","sha256":"45a8505a86014b27b96db52f81bf4dbced7a8eb9b419d28e89bcfccb334b49b2","sha512":"3fa61799ef336da5f4c9a0a0fcf7d14fdb09e2e18cbc1488eae44a06b61beca3831c9eadd77b22a16a84e8041074d74d51429e23a1a6e8ce9b56860ed682e800","ssdeep":"96:SO1arO1aTJc+ukO1aaN3OEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMac8:4hHdPgKQcXr3lVwa3RzJZ","tlshash":"15c19cd1087be114ab831cc123cf7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T11:27:36.868673Z","last_seen":"2026-04-03T17:54:14.973128Z","times_seen":5591,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":186,"dns":1,"connect":7,"send":0,"wait":22,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encore.scdn.co/fonts/SpotifyMixUI-Bold-4264b799009b1db5c491778b1bc8e5b7.woff2","fqdn":"encore.scdn.co","domain":"scdn.co","tld":"co"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:52.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.scdn.co","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:25:66:57:1B:87:1F:49:8D:C6:86:60:1B:C3:B4:89:84:72:4A:92","sha256":"FB:12:4E:1B:42:51:F1:34:85:E4:29:67:F9:E7:1B:F7:49:7F:01:C8:5A:8F:0D:71:71:38:3C:5B:27:97:49:88"}}},"request":{"raw":"GET /fonts/SpotifyMixUI-Bold-4264b799009b1db5c491778b1bc8e5b7.woff2 HTTP/1.1\r\nHost: encore.scdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed-cdn.spotifycdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 20 May 2024 10:12:25 GMT\r\netag: \"61b62cce587e38f4dee4c6c17bcd5a0e\"\r\ncontent-type: font/woff\r\nx-amz-checksum-crc32c: yXssgQ==\r\nvary: Accept-Encoding\r\nexpires: Mon, 05 Jan 2026 13:54:52 GMT\r\ndate: Mon, 05 Jan 2026 13:54:52 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41412,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format (Version 2), TrueType, length 41412, version 1.6553","md5":"4264b799009b1db5c491778b1bc8e5b7","sha1":"7baaf2a83c8fd71eaff63f5c075d56cb7c6b1e53","sha256":"4252606cf3c6b177ae87bf37e83c73db1895a99d44b9c6965309cd343124c9ba","sha512":"407470a9526e4f96ff33da7a4531134885b5021010ad067bb042691e95ade2b33bb48180b2abd3984021d05978aa85d5b7ef9c1463cfee04b96a18686c9c4e01","ssdeep":"768:wBiq8iQy84nMQNsAnUZaLzLSIHBUSRahdj9oGX3de3TGMf:wo6WlSe6BUCa3BXs3qq","tlshash":"7e03f29ed8283d68c0d6560f905a6b52610d6b78faf22bb207c8ffc0a56570b18c9b5d","first_seen":"2024-07-31T19:18:17Z","last_seen":"2026-04-03T18:03:45.504311Z","times_seen":3338,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":168,"dns":149,"connect":3,"send":0,"wait":2,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encore.scdn.co/fonts/SpotifyMixUI-Regular-cc3b1de388efa4cbca6c75cebc24585e.woff2","fqdn":"encore.scdn.co","domain":"scdn.co","tld":"co"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:52.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.scdn.co","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:25:66:57:1B:87:1F:49:8D:C6:86:60:1B:C3:B4:89:84:72:4A:92","sha256":"FB:12:4E:1B:42:51:F1:34:85:E4:29:67:F9:E7:1B:F7:49:7F:01:C8:5A:8F:0D:71:71:38:3C:5B:27:97:49:88"}}},"request":{"raw":"GET /fonts/SpotifyMixUI-Regular-cc3b1de388efa4cbca6c75cebc24585e.woff2 HTTP/1.1\r\nHost: encore.scdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed-cdn.spotifycdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 20 May 2024 10:12:27 GMT\r\netag: \"b7f76367a4827918777a80c836e579c6\"\r\ncontent-type: font/woff\r\nx-amz-checksum-crc32c: lJoHOA==\r\nvary: Accept-Encoding\r\nexpires: Mon, 05 Jan 2026 13:54:52 GMT\r\ndate: Mon, 05 Jan 2026 13:54:52 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35596,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format (Version 2), TrueType, length 35596, version 1.6553","md5":"cc3b1de388efa4cbca6c75cebc24585e","sha1":"12745b74ea5ebee6e7ad5803110e688076c91f99","sha256":"91623228bbcef3805f91d3df656132fcf95b5572bf345039eedc91a136b7ed09","sha512":"afa0790944f54e088355fc88de30573735e8569e2a1e8db68f50da613d6e6484fe304c92cd56595624a4e059852e58cce7751632429ce4dae6451f17460121c3","ssdeep":"768:9bUVl8GV39sjLgAbPcHEkPfhxBJJMLdkTpEj4dk+CVGS6mB3uMAOvHvE6:aloLlbeXJ20pm2kNN3uMbvv","tlshash":"f4f2e1bb41b03f0bdc5c8b5bca8cda13b691a9bddf52d5111ef9f52c2499489103079d","first_seen":"2024-07-31T19:18:17Z","last_seen":"2026-04-03T18:03:45.464975Z","times_seen":3337,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":173,"dns":149,"connect":1,"send":0,"wait":2,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/output-onlinepngtools.webp","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/output-onlinepngtools.webp HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"1c096-694e82f6-a3af6;;;\"\r\nlast-modified: Fri, 26 Dec 2025 12:43:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 114838\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114838,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bfd41aada0e7aded1048b53b47e2d94b","sha1":"21251cb4702d8da732215d6651dca4f42920b002","sha256":"52c5c3728b2bbf2e660e6f915f11746c8a16d944aa0029792acd4673a585d84d","sha512":"94c101db347671394e5c4466d2db3fb428b752528423a4b3d974a099237c56391ae4259e58377c4a924fce91cc804186ba2ef6ddcc15a150c6afc22700c7defc","ssdeep":"3072:FjrNhyvUg18NOeSooooooooooooooooooooF31aiYEGV5qkBFFGeklcxYTBjbdp3:9yvUgm1L0VRsW9","tlshash":"53b3e0f0bac2ee2fe7308f34d11ad556ce077e990a01c9be659aae33fc9b7125055405","first_seen":"2026-01-01T05:38:21.793506Z","last_seen":"2026-03-08T10:47:46.943919Z","times_seen":4,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":432,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-admin/admin-ajax.php","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:51.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 54\r\nOrigin: https://wellnesswisewhispers.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":54,"data":"action=everest_forms_get_form_update_nonce\u0026form_id=175"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://wellnesswisewhispers.com\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\ncontent-type: application/json; charset=UTF-8\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-litespeed-cache-control: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 56\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1f75cb1697d75ef2735c72ca8d18f709","sha1":"e40a97e396c631d114d4761420aa83f6ce92b81d","sha256":"3caa142d37e35bcff79ed890137f15b4ccaf17eebbe9be1affc9619325bb678d","sha512":"367444398a69e9c17852f5fcb55694075b249b4c94ea4b186ae039420175f91a739c1e476ad3f3d98aa2f9aa1fde5ad6637fb4988924d32ff4945da3a988a4e0","ssdeep":"","tlshash":"2b800451151c04d1c410114031747d40d4543717410004c5544d5004df3001130534df","first_seen":"2026-01-05T13:55:23.742692Z","last_seen":"2026-01-05T13:55:23.742692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T13:54:48.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-dns-prefetch-control: on\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nlink: \u003chttps://wellnesswisewhispers.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://wellnesswisewhispers.com/wp-json/wp/v2/pages/649\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://wellnesswisewhispers.com/\u003e; rel=shortlink\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ndate: Mon, 05 Jan 2026 13:54:48 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":207748,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23087)","md5":"bf22bd8d8ac48f9a219428403e75b996","sha1":"fc93e5c5f990f68abf94831dc934e032ee37914a","sha256":"3c61dd535208ba992075eebe8017720cd7ef2f4b2ae82cb1ed0614e43fc10dc2","sha512":"8c038b4848b7ca0faed6f87dd2d3d533d149d932004f65d97e9975ee8881e6286c54c8a3e142ea45431d8ba7765579ffe07de5cd99d564af2d647274446f0ede","ssdeep":"3072:iguDq0vA0cAIUVruOeH33pDYQqt4JiOQAXuk1mz21:eq0TyDmAXu1a1","tlshash":"ff14d772e16c00aa756f439cc41533ecb576e407ce0289d4f2fce2a8a7ccdb659a2759","first_seen":"2026-01-05T13:55:23.743661Z","last_seen":"2026-01-05T13:55:23.743661Z","times_seen":1,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/james-sterling_avatar_1-40x40.jpg","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/james-sterling_avatar_1-40x40.jpg HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"4c4-694ffcc5-a3b09;;;\"\r\nlast-modified: Sat, 27 Dec 2025 15:35:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1220\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1220,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 40x40, components 3","md5":"191f7a3089a4953e85662a2e657cdc08","sha1":"2da6dae2f560ad0cdf30fb547ac3a1283717f452","sha256":"ebe1456195338e07819adaf2786db28eae4bb4b124831073cbe6750f696001ae","sha512":"171ac73181fad3941e88bc38166ac212eb3a783be6939955d9584d7b281322a3a824fa137a6847fdc2cbe4971533605686346076a24565cdc07da30890094e59","ssdeep":"","tlshash":"a921747b579103f0ac0a9d7a1914239aa2cd6e02bc988a063fb4c1c7c5519cd984ee09","first_seen":"2026-01-01T05:38:21.756343Z","last_seen":"2026-01-05T13:55:23.744763Z","times_seen":2,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/6a649523628e8d514bf86b2251b8ff28.js?ver=8ff28","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/js/6a649523628e8d514bf86b2251b8ff28.js?ver=8ff28 HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"8181-695bbdcc-1413e2;br\"\r\nlast-modified: Mon, 05 Jan 2026 13:34:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 9518\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33153,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32734)","md5":"517b9a53d12410924569cb2beb2dd2c8","sha1":"0d1a9a420ff6f57bb1df7aaa169efaa3bfbb0744","sha256":"3489b2da207b716ee96494eeaeb254f575a5f678f4d9183a15954a80c1ecad3d","sha512":"287783a560f90c60eb8e6fffb36bf7bc6e0a00e67614011bf6d4cd1ccdb4004445a1328553890da55612af44499de78f19ae38351b344d9343fa7ea5d4ac9597","ssdeep":"768:3I1Ul7EwygLTqMaNFmicbDkhKl1vzdNJSenTpB812I4Es3mSoMWbkoRgS0LJy:YG0oJr7EsWSDSP","tlshash":"c9e296ceb796f075129776f6a27f724ab73b249a381e4020e124ccd16c7494f8263e6d","first_seen":"2025-12-12T16:22:29.856787Z","last_seen":"2026-03-07T09:43:00.026383Z","times_seen":35,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/bdb53720-118a259f23343d3d.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/bdb53720-118a259f23343d3d.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 29 Dec 2025 10:59:26 GMT\r\netag: \"aa417f4055ecd6144508e6c0ebba748d\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767005352\r\nx-amz-checksum-crc32c: tFWHjA==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325840,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"aa417f4055ecd6144508e6c0ebba748d","sha1":"0d945eed852a79535d2fc6103ec3a35b0b4bd777","sha256":"2c5bdcce619e1946e463d5e3842d336d6cfc6b34741959142340c81ee3d2b0d7","sha512":"1dfde4a4368c8f584014f0b79d3984b2dfb0a30c94f44fa4b144dc95d73343dc527dec9b2c9b2cd3eb316a4b8b7643565c9b4b266431e301ce70f75b9fd3dbc5","ssdeep":"3072:CbJid/j7qo5JASfjji4Wb20zgV3RbGpLsev6ns7BkfAUwrsraTXWtIGT:9/1fkkXCNvms9kfA/S5tf","tlshash":"a5640984f764b021835a66a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","first_seen":"2025-12-29T12:11:09.447894Z","last_seen":"2026-01-05T13:55:23.746544Z","times_seen":53,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":199,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/3327.b5eda29f110baf69.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:52.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/3327.b5eda29f110baf69.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Dec 2025 12:12:15 GMT\r\netag: \"64caa3603876f6ab123556cbc1a27499\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767096024\r\nx-amz-checksum-crc32c: ncO65g==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:52 GMT\r\ndate: Mon, 05 Jan 2026 13:54:52 GMT\r\ncontent-length: 11185\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46629,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (46629), with no line terminators","md5":"64caa3603876f6ab123556cbc1a27499","sha1":"67186538e4d2172f339ebe83ec0f6fbf9b4c05e5","sha256":"cc477f8201e6f5e21ea72ff5dadfba0f88b766f76fda3be46f3943e2ae9a3954","sha512":"0d62c49b8aa6cad097d9eb72572db10676b1014eef6d9c84206118171572c84281881da369799e298b84f574ec8d9966a8f263cc04969933be332610b519588e","ssdeep":"768:YtcHKEZbv8VNNptd/Lj+3EHI3B+BqfsY3u1pYvQuIhrOcnNY9PO+BrbXC9hrsom1:YtcHKEZbv93EHI3B+BqfsY3u1pX+9POY","tlshash":"6e23d966bb16afb382848252b9355143823c40df51049a287799bcfe2d5cbc1a7bf7f1","first_seen":"2025-12-30T20:21:42.216351Z","last_seen":"2026-03-24T20:36:38.225887Z","times_seen":508,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/css/2810c1822186548aa59f31b56a3fc488.css?ver=fc488","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/css/2810c1822186548aa59f31b56a3fc488.css?ver=fc488 HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"16963-69567504-141b04;br\"\r\nlast-modified: Thu, 01 Jan 2026 13:22:12 GMT\r\ncontent-type: text/css\r\ncontent-length: 11934\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92515,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b39dd099bed9e51be8fbd50c56c1a610","sha1":"1d682d9eb010125c959c7ebb5980b25b88b5cff9","sha256":"91730d53b7749e63e33361415a825fd9b9e63fac562a15604bbd3d7a31eec8ba","sha512":"b2e503f816d777019392e6fbc81022c4923ec494e6be6521d33e4859cea4693ea5024b0871bc320cc5df5162e5b8d022bbf109181cd171a08e53bc9faeeae1f4","ssdeep":"1536:linM82UCSGE/uc6sqMdWwVpabr5LG+aGQSeZ8rcqcdTKlRoKbp51wo:xjR","tlshash":"049343a1a5fa40f97793523c0e9416d83a5ca443cab05fdaf0dac5e062ce6a50fe1737","first_seen":"2025-12-28T01:15:45.289407Z","last_seen":"2026-01-05T13:55:23.747623Z","times_seen":3,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/james-sterling_avatar_1-30x30.jpg","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/james-sterling_avatar_1-30x30.jpg HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"404-694f2bac-a3bd7;;;\"\r\nlast-modified: Sat, 27 Dec 2025 00:43:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1028\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1028,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 30x30, components 3","md5":"d49136dbd455b8159987e81bf2f54a8f","sha1":"f057b1e884078e120eaedba3b85d030b259bf65c","sha256":"45b107d48fae4e1dc2a1f3297fea51066bc311b43ec871613f1b4fc17ed34e24","sha512":"513e48451cb96f97ad737485de06ef44a46b956b33fc11c00a8a235564fe17e9294e5d93f51e6e10a0e1b4a275739513b42c5f54ebb7ff237627150baa7fd223","ssdeep":"","tlshash":"ac116d2e6b1243d4c80bccf90e46486ea29da6d2ba682b113b71c1a2c2305ccc4889cc","first_seen":"2026-01-01T05:38:21.795664Z","last_seen":"2026-01-05T13:55:23.748667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/956ba4ca-0c87f12d5cae4c6b.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/956ba4ca-0c87f12d5cae4c6b.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 02 Oct 2025 19:07:31 GMT\r\netag: \"05f90c21507ac742f3edd8be65ab7d79\"\r\nx-amz-meta-goog-reserved-file-mtime: 1759431555\r\nx-amz-checksum-crc32c: Pr3h8Q==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncontent-length: 1384\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8748,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8748), with no line terminators","md5":"05f90c21507ac742f3edd8be65ab7d79","sha1":"5d04b6fe87d32ef356293f7e2359047303d54495","sha256":"c1c9b95040410cdcda455fae3a35de0cf733fcbbc15690bc15b0f0e0f95537c7","sha512":"b18898cd0ecd460238a023f31406dea63c7528b4fb9f30ff9683b618b2f41ac156e2859c5e0f6c985c749eba322bd46e91f80be001f0188f387cf79ef38af7e4","ssdeep":"192:t5LeGH/YpydyOIfb8NDfAA2fb8NDfAAZC1GHMhNhbGHEMzlydyOXFR0SebeyMyOs:kfbATAA2fbATAAA+G0mj6","tlshash":"080246706b5f484dc31599ba369439c902f1fadcf4c65aaa505ec471b2d8c302b6b36f","first_seen":"2025-10-02T20:11:27.562593Z","last_seen":"2026-03-24T20:36:38.210505Z","times_seen":1096,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/7791-ce6c1349d83d2cb8.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/7791-ce6c1349d83d2cb8.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 29 Dec 2025 10:59:25 GMT\r\netag: \"d9c3619be6c492fb5f48a6c3dfa54d20\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767005352\r\nx-amz-checksum-crc32c: ANfVag==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncontent-length: 4717\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12740,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12740), with no line terminators","md5":"d9c3619be6c492fb5f48a6c3dfa54d20","sha1":"4dd6d6b48a61e14d8287104e3c53947618deab3a","sha256":"ba80aadd8c2411ecc7d6cbf77deefde885a701185918dfa17cb624d56a8d2479","sha512":"6a2351a57e3a239bd612abf252a5863e956b6088e86820a7f703634ac61e066cd96717df42f0bf75cb0f35cbdb15fb3e28ce8bb00ecb576d419b1b381b23fb6c","ssdeep":"384:YxqjRC/agVSqlVjpJOho8sNEHJM5xqHwwUP4r6/ThS:xC/aozK6RPu","tlshash":"8a42da85715578741bbf507e907f0101f27a2419c396f820ba628bf911fa8edb227b9e","first_seen":"2025-12-29T12:11:09.426785Z","last_seen":"2026-01-05T13:55:23.75029Z","times_seen":53,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/6397c389-e0d0-466b-9e82-7ea197772a1a/_buildManifest.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/6397c389-e0d0-466b-9e82-7ea197772a1a/_buildManifest.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Dec 2025 14:57:50 GMT\r\netag: \"22dff2cbf11eac61cb9ab26cb7ebc594\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767105896\r\nx-amz-checksum-crc32c: v1PYEw==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncontent-length: 1069\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2839,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2839), with no line terminators","md5":"22dff2cbf11eac61cb9ab26cb7ebc594","sha1":"5fe53a0e4de89c64eebe89c420d0e10aa57502df","sha256":"15f4f239d09f380bb10a45291fb50993a68ec79e8310bf8eb2b19ec24d661f7c","sha512":"b836b30c4346a423b4cb99313c678c83cc8d4d02a61a36f318fd5eff383643d322c88b44331cf16541ac3b83f62a605fe1bf8ae4dbb1648469979ce17a1663a9","ssdeep":"","tlshash":"755130430099fe031db0dde2753b2322a6829973e1781584f3fd8e3901f255e2b6b5b6","first_seen":"2025-12-30T20:21:42.230423Z","last_seen":"2026-01-05T13:55:23.750726Z","times_seen":50,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encore.scdn.co/fonts/SpotifyMixUITitleVariable-8769ccfde3379b7ebcadd9529b49d0cc.woff2","fqdn":"encore.scdn.co","domain":"scdn.co","tld":"co"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:52.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.scdn.co","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:25:66:57:1B:87:1F:49:8D:C6:86:60:1B:C3:B4:89:84:72:4A:92","sha256":"FB:12:4E:1B:42:51:F1:34:85:E4:29:67:F9:E7:1B:F7:49:7F:01:C8:5A:8F:0D:71:71:38:3C:5B:27:97:49:88"}}},"request":{"raw":"GET /fonts/SpotifyMixUITitleVariable-8769ccfde3379b7ebcadd9529b49d0cc.woff2 HTTP/1.1\r\nHost: encore.scdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed-cdn.spotifycdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 20 May 2024 10:12:30 GMT\r\netag: \"8c2f2b5166c31039f2bc1c69a40e99ac\"\r\ncontent-type: font/woff\r\nx-amz-checksum-crc32c: oB8zEA==\r\nvary: Accept-Encoding\r\nexpires: Mon, 05 Jan 2026 13:54:52 GMT\r\ndate: Mon, 05 Jan 2026 13:54:52 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383268,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format (Version 2), TrueType, length 383268, version 1.6553","md5":"8769ccfde3379b7ebcadd9529b49d0cc","sha1":"f0ccc08ceaab40e27a9200ab755beff24b9d5810","sha256":"406312aa9e36de68c1c1975221e22ccd619a390f5fe9665ce64eff29ae32ba4c","sha512":"45f0774300a5584201acca6bf75933c67af1a9f677b378feb13253dd98d978f47ba933b617d6689ae4abe269a1052aa1f88252e23f6a3bfb61fcec6fe3412e95","ssdeep":"6144:Fjc/+tW6WCBcZZ3qR2Ayeo7Gu/8OJYHzeMPSyofJ4f29cLs2dFYYMYvYNw8qyc9o:F6+Q6WCK3LsoyNOtMKyUJsPdFbt9Fk44","tlshash":"fc842320f84074eecb60db74b8486e4b15570e6171fee28ce342d75a0eaf05796b6b1b","first_seen":"2024-07-31T19:18:17Z","last_seen":"2026-04-03T13:51:27.654487Z","times_seen":2424,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events","fqdn":"gew4-spclient.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"35.186.224.28","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:56.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotify.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:96:7A:CE:E4:F6:90:B6:56:41:63:72:FB:64:09:A5:1C:55:D5:78","sha256":"D2:59:C0:71:B2:2E:E8:45:23:E7:B2:56:E4:B0:13:AF:F3:C7:B4:F2:5E:ED:B1:AE:B5:A8:2B:93:58:8D:63:C6"}}},"request":{"raw":"OPTIONS /gabo-receiver-service/public/v3/events HTTP/1.1\r\nHost: gew4-spclient.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://open.spotify.com/\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://open.spotify.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,PATCH,POST,PUT,OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Origin,Content-Type,Spotify-App-Version,App-Platform,X-Spotify-Connection-Id,X-Client-Id,X-Spotify-Quicksilver-Uri,client-token,content-access-token,x-cloud-trace-context\r\naccess-control-max-age: 604800\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:55 GMT\r\nserver: envoy\r\nvia: HTTP/2 edgeproxy, 1.1 google\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":80,"dns":20,"connect":25,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events","fqdn":"gew4-spclient.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"35.186.224.28","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:56.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotify.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:96:7A:CE:E4:F6:90:B6:56:41:63:72:FB:64:09:A5:1C:55:D5:78","sha256":"D2:59:C0:71:B2:2E:E8:45:23:E7:B2:56:E4:B0:13:AF:F3:C7:B4:F2:5E:ED:B1:AE:B5:A8:2B:93:58:8D:63:C6"}}},"request":{"raw":"POST /gabo-receiver-service/public/v3/events HTTP/1.1\r\nHost: gew4-spclient.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1355\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1355,"data":"{\"suppress_persist\":false,\"events\":[{\"sequence_id\":\"X68fwiU9pv/+AdYtVlCJCQ==\",\"sequence_number\":1,\"event_name\":\"SemanticMetricClientNonAuth\",\"fragments\":{\"context_sdk\":{\"version_name\":\"4.0.3\",\"type\":\"javascript\"},\"context_time\":{\"timestamp\":1767621296287},\"context_user_agent\":{\"value\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"},\"message\":{\"what\":\"web_vitals_next.js-hydration\",\"metric_type\":\"timer\",\"value\":79000000,\"tags\":{\"app\":\"embed-standalone-prod\",\"application\":\"embed-standalone-prod\",\"name\":\"Next.js-hydration\",\"label\":\"custom\",\"route\":\"/playlist/[id]\",\"slingshot\":\"false\",\"environment\":\"browser\"},\"key\":\"embed-standalone-prod\",\"component_id\":\"embed-standalone-prod\"}}},{\"sequence_id\":\"X68fwiU9pv/+AdYtVlCJCQ==\",\"sequence_number\":2,\"event_name\":\"SemanticMetricClientNonAuth\",\"fragments\":{\"context_sdk\":{\"version_name\":\"4.0.3\",\"type\":\"javascript\"},\"context_time\":{\"timestamp\":1767621296287},\"context_user_agent\":{\"value\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"},\"message\":{\"metric_type\":\"counter\",\"what\":\"embed_rendered_referrer\",\"tags\":{\"app\":\"embed-standalone-prod\",\"application\":\"embed-standalone-prod\",\"referrer\":\"other referrers\",\"slingshot\":\"false\",\"environment\":\"browser\"},\"value\":1,\"key\":\"embed-standalone-prod\",\"component_id\":\"embed-standalone-prod\"}}}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncache-control: no-cache\r\ncontent-length: 13\r\naccess-control-allow-origin: https://open.spotify.com\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\naccess-control-allow-credentials: true\r\ndate: Mon, 05 Jan 2026 13:54:56 GMT\r\nserver: envoy\r\nvia: HTTP/2 edgeproxy, 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b607f4913eec1d8a316cac593bd4a8e8","sha1":"daa906a2c39d6cd6ded7799f6861d1a487901bbb","sha256":"debf84af8d66827e1cbc6791aa686504e3116d8cb20f4697fef23108333061f8","sha512":"70258f0bb3c6bc339a954528515deb8a2f5f0d547592c5495efbe0b4fe55c8d267f29ac3b3dfcc7929555c3b8211bbf03f3cdf24e76334500e81d4cc7f1b231d","ssdeep":"","tlshash":"346000000cc000030c00000cc000000000c00000003000300c0300cc03000000cc3c00","first_seen":"2023-04-06T07:35:35Z","last_seen":"2026-04-03T18:03:45.396029Z","times_seen":46010,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/css/7fb10c80a292babc1dbeaf9497365111.css?ver=65111","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/css/7fb10c80a292babc1dbeaf9497365111.css?ver=65111 HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"15a-695bbdcc-1413dd;br\"\r\nlast-modified: Mon, 05 Jan 2026 13:34:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 148\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":346,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (346), with no line terminators","md5":"046a4cbe478c0732be254a75723096bb","sha1":"f633a553461277004ddc74d758bf9d1b178c7af4","sha256":"d1c8bce7a5b55c704c2fbaa9c568b3331c0156bba353cade4b0d8070a3c6aa58","sha512":"af41307072e19f2720bd5dc7e39dd1ede192972a8dc6d4ecba9953e0b88116f1f0638ddbe40d7cc6923ae7e6dafdd54d98c82835e0423122266047d2e37b93b1","ssdeep":"","tlshash":"36e048c654f58bbf6a179339055f408c378839c15f417582b98b91d061cc5b95b39727","first_seen":"2025-10-31T10:29:22.038584Z","last_seen":"2026-04-03T17:49:16.904196Z","times_seen":298,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/css/781ed50a256bd4846e4e5ee7139b37b7.css?ver=b37b7","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/css/781ed50a256bd4846e4e5ee7139b37b7.css?ver=b37b7 HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"ec5-69567504-141b05;br\"\r\nlast-modified: Thu, 01 Jan 2026 13:22:12 GMT\r\ncontent-type: text/css\r\ncontent-length: 1121\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3781,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3781), with no line terminators","md5":"1cad86cb9d361583ceb06050c6e7558c","sha1":"758e5c19cf03701af9f5f5b1aca420a828dadfb1","sha256":"c91a4777fe1fa0814c545cc6aa7373e1dc7d6335f8692f1dcdee99bcea22e016","sha512":"2ceafd93a5bd54e7d6beba223b560b145fd4b2237203aca8fcbcb2b2ed6ba8bfd82af82b658e26f85983704d19e0f95441d978c34e6bc93bba4cbf5912073594","ssdeep":"","tlshash":"c371f0383188a33d580371689b40559e8a56e210df236fdaf2b7113645c3be2bef57c4","first_seen":"2025-04-18T09:35:43.266691Z","last_seen":"2026-04-03T16:12:35.941282Z","times_seen":841,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/css/36cf4511801a9b79.css","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/css/36cf4511801a9b79.css HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Dec 2025 09:55:52 GMT\r\netag: \"b42f623b0b1e7f67fe8ab086b99dc225\"\r\nx-amz-meta-goog-reserved-file-mtime: 1764755063\r\nx-amz-checksum-crc32c: qZ3y4A==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncontent-length: 6023\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32996,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (32994), with no line terminators","md5":"b42f623b0b1e7f67fe8ab086b99dc225","sha1":"edd57bb34f13d55bf8fe91294da0dd3e2ec13c72","sha256":"20331859abfb14bb9da1bf3a759d2b9cd3be2267a87511513165a44dba17e8ba","sha512":"4e6076331ceca0694d66f3a0e33be55877f291b8c15485556bccd193c722cf3c7fa7b71144773c5170bce7b8814253a2f0fa2060ec96905c55e6dc4cc0f5eed5","ssdeep":"384:iLvN/VjuWWbOcdudDeDSG1gD00ZyQqfSntR:iLbWwdiHg6QqfSntR","tlshash":"79e2ba730a21753cf57fed2ad6c939185258f8139f0619eeea402d6d83cb39d0a32ac5","first_seen":"2025-12-03T14:47:52.977243Z","last_seen":"2026-03-19T10:36:29.733054Z","times_seen":584,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":214,"dns":207,"connect":1,"send":0,"wait":4,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/6397c389-e0d0-466b-9e82-7ea197772a1a/_ssgManifest.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/6397c389-e0d0-466b-9e82-7ea197772a1a/_ssgManifest.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Dec 2025 14:57:50 GMT\r\netag: \"b6652df95db52feb4daf4eca35380933\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767105896\r\nx-amz-checksum-crc32c: Ypo4GQ==\r\naccept-ranges: bytes\r\ncontent-length: 77\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-04-03T18:30:29.61758Z","times_seen":202879,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apresolve.spotify.com/?type=dealer-g2\u0026type=spclient","fqdn":"apresolve.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"35.186.224.24","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:52.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotify.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:96:7A:CE:E4:F6:90:B6:56:41:63:72:FB:64:09:A5:1C:55:D5:78","sha256":"D2:59:C0:71:B2:2E:E8:45:23:E7:B2:56:E4:B0:13:AF:F3:C7:B4:F2:5E:ED:B1:AE:B5:A8:2B:93:58:8D:63:C6"}}},"request":{"raw":"GET /?type=dealer-g2\u0026type=spclient HTTP/1.1\r\nHost: apresolve.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-length: 115\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\nserver: envoy\r\nvia: HTTP/2 edgeproxy, 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":288,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"570523157a2968fddea3db8d827906f7","sha1":"b528bed947ee93627e2073b29c3b90f57ee22c86","sha256":"fba9377b3979a450dc3229a67b85db96943e9a8d7e837242f4303333de46e8fe","sha512":"544d42e9749637d90a3075b90bd35303dc8cf712075323f8b3e434fb5e4d93afe490cf58d2b7489842a2bc6245626909ba5bd0adceb565117fbe49263b789a2d","ssdeep":"","tlshash":"3cd04cc34379cdf0a6cd0210e639e963b4ff8218e0bfbd920356820d578c0d9c9552a0","first_seen":"2025-01-13T16:17:41.406215Z","last_seen":"2026-04-03T18:03:45.524859Z","times_seen":1277,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":69,"dns":12,"connect":20,"send":0,"wait":43,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events","fqdn":"gew4-spclient.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"35.186.224.28","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:55:02.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotify.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:96:7A:CE:E4:F6:90:B6:56:41:63:72:FB:64:09:A5:1C:55:D5:78","sha256":"D2:59:C0:71:B2:2E:E8:45:23:E7:B2:56:E4:B0:13:AF:F3:C7:B4:F2:5E:ED:B1:AE:B5:A8:2B:93:58:8D:63:C6"}}},"request":{"raw":"OPTIONS /gabo-receiver-service/public/v3/events HTTP/1.1\r\nHost: gew4-spclient.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://open.spotify.com/\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://open.spotify.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,PATCH,POST,PUT,OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Origin,Content-Type,Spotify-App-Version,App-Platform,X-Spotify-Connection-Id,X-Client-Id,X-Spotify-Quicksilver-Uri,client-token,content-access-token,x-cloud-trace-context\r\naccess-control-max-age: 604800\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:55:02 GMT\r\nserver: envoy\r\nvia: HTTP/2 edgeproxy, 1.1 google\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","fqdn":"open.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"151.101.67.42","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"open.spotify.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Mon, 22 Dec 2025 06:53:30 GMT","end":"Wed, 21 Jan 2026 06:53:29 GMT"},"fingerprint":{"sha1":"27:6E:23:DD:C6:FB:E6:AC:EC:6D:40:D3:BF:C5:A8:35:92:FD:09:5D","sha256":"82:27:C6:0F:9F:70:25:9F:67:42:98:1C:5B:E7:B6:04:2F:AF:28:79:2D:53:7D:32:86:3A:71:02:EF:00:C5:D6"}}},"request":{"raw":"GET /embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator HTTP/1.1\r\nHost: open.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Next.js\r\netag: \"ywzj13m5p7o9x\"\r\ncritical-origin-trial: Tpcd\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: sp_t=b5bd800bdb2e3ff0a14a950f90d0f054; Path=/; Expires=Tue, 05 Jan 2027 13:54:51 GMT; Max-Age=31536000; Domain=.spotify.com; Secure; SameSite=none\nsp_landing=https%3A%2F%2Fwellnesswisewhispers.com%2F%3Fsp_cid%3Db5bd800bdb2e3ff0a14a950f90d0f054%26device%3Ddesktop; Path=/; Expires=Tue, 06 Jan 2026 13:54:51 GMT; Max-Age=86400; Domain=.spotify.com; Secure; HttpOnly; SameSite=none\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nvia: HTTP/1.1 fringe, HTTP/2 edgeproxy, 1.1 google, 1.1 varnish\r\ncontent-encoding: gzip\r\norigin-trial: AjTBCzHiqtNU3PxD6GL8VpVl68/SfxkZJuLQbbyvSNj6/o9VuhZ5EPb/2dTYqi+Mot0AD6XOHBeIatAwEt4lAQcAAABOeyJvcmlnaW4iOiJodHRwczovL29wZW4uc3BvdGlmeS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTl9\r\nserver: envoy\r\ncontent-type: text/html; charset=utf-8\r\nx-envoy-upstream-service-time: 254\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\nx-served-by: cache-hel1410030-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-timer: S1767621291.997163,VS0,VE316\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":31466,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31461), with no line terminators","md5":"cd4d63458103fb553f190286ef8d0f9a","sha1":"182d994ad717d3a3ad7df618d1cefd4bd2bffa22","sha256":"4baab007ceff1384021b2c9ac9774d850739e8f0567031eb8266ee95e0c900ca","sha512":"617e4d71ba2136c41b31e4b09b5afa0bfbe0a92a594c78032d91c016d912966207fd9ec63db68fc1df7391b59caed01c6ec66b42432c29e50aae34bcb9d50a93","ssdeep":"192:XZjqbkbpIGL2bE4rj48vOf7y+pvzQ912mUY41W87H5e55OROt0WPM7bOwP22P3A3:XZ/GGiPE8aBdJD5eV0aM7Z2wHY","tlshash":"a8e275d250856a3289c346feb15d3119572efc13caf2a995de7895f807cb8f9f00e21a","first_seen":"2026-01-05T13:55:23.755604Z","last_seen":"2026-01-05T13:55:23.755604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":64,"dns":26,"connect":14,"send":0,"wait":330,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/pages/playlist/%5Bid%5D-ac88cd2b208afe1a.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/pages/playlist/%5Bid%5D-ac88cd2b208afe1a.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Dec 2025 11:01:14 GMT\r\netag: \"a316fc721da7f98305fe05a1aef60ee1\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767091862\r\nx-amz-checksum-crc32c: 4bkvCA==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncontent-length: 695\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1191), with no line terminators","md5":"a316fc721da7f98305fe05a1aef60ee1","sha1":"23c05f9b3d639541c8a7dee20289dee419fdd880","sha256":"cb65a0e748a176d75dd83f53ddab1b2a85c2bd6254a9ef2f4588dc0e19afdda8","sha512":"7290ce4064f2fba0735b40d4b2073829e466571107b048462709ff58e1ded86345f6dbfee913aa5510ecf4c2ec72f226ee68ae4f935b60da4783da8b99729ba7","ssdeep":"","tlshash":"bf21218411f079aaa2ab15dc8137420a7159193f16499a73f3684cbd3ab9dc94621fcb","first_seen":"2025-12-30T20:21:42.240584Z","last_seen":"2026-01-05T13:55:23.756589Z","times_seen":17,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/cropped-36c99bf8-4321-45a7-b16c-5dbe65719d72-removebg-preview-32x32.png","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:51.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cropped-36c99bf8-4321-45a7-b16c-5dbe65719d72-removebg-preview-32x32.png HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:51 GMT\r\netag: \"4c4-694fee3e-a3e10;;;\"\r\nlast-modified: Sat, 27 Dec 2025 14:33:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1220\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"8f9c18b46bc7c6d2a76416388908e387","sha1":"bb1da22e086a17732f23593111e438e33b6cfdb6","sha256":"2e3a6cc2ce5a2651b89cf9a6e0f2cc3d66ac93c6637d625a56b6facf93a33f45","sha512":"c853ec8f16f235b0b9345641316d5321ce3cffde1b364f59e7548819ea68bd1b7324ca1982f3011e79b754d0a2ee4ba99420ff8acb8ce32869af1700822c13e6","ssdeep":"","tlshash":"3a21b40320472ce5fd0065e2656498d5bda299d83e21c82868cba3223d74c0ee468ecb","first_seen":"2026-01-01T05:38:21.817005Z","last_seen":"2026-03-08T10:47:46.953557Z","times_seen":4,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/36c99bf8-4321-45a7-b16c-5dbe65719d72-removebg-preview.png","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/36c99bf8-4321-45a7-b16c-5dbe65719d72-removebg-preview.png HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"13919-694da8dd-a3c3e;;;\"\r\nlast-modified: Thu, 25 Dec 2025 21:13:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 80153\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 489 x 489, 8-bit/color RGBA, non-interlaced","md5":"e0b1dd2c21ac8dc755e6b02ea4832b45","sha1":"69a4387b49eb34482ad58715edf2c3bc11be411a","sha256":"7e43905afa66c1c727927aabe0318a98d96eec6987a8c28be6fc0ece808d238a","sha512":"b7be4d61178b8f79576ec1d63b37fd22dc0a1a2256f90539cc48373b4a0296e1ff0cef6f10d8e32bd50682e0336374c1ea3bc61e9b638687123ee1cb7c438092","ssdeep":"1536:VbWfJLQkbY3OJBIOgGMgPKNWL1je8ID+wzdYKreLhXBJ6A0XTiY:VbWfJ09aynnRYM8IDyKreLbg5","tlshash":"31730259f7c75f6f96f39a0a86c104fe1203afa64bfd80218468e44f16ad17f223592c","first_seen":"2026-01-01T05:38:21.799704Z","last_seen":"2026-03-08T10:47:46.97782Z","times_seen":4,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/output-onlinepngtools.webp","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:49.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/output-onlinepngtools.webp HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:49 GMT\r\netag: \"1c096-694e82f6-a3af6;;;\"\r\nlast-modified: Fri, 26 Dec 2025 12:43:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 114838\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:49 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114838,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bfd41aada0e7aded1048b53b47e2d94b","sha1":"21251cb4702d8da732215d6651dca4f42920b002","sha256":"52c5c3728b2bbf2e660e6f915f11746c8a16d944aa0029792acd4673a585d84d","sha512":"94c101db347671394e5c4466d2db3fb428b752528423a4b3d974a099237c56391ae4259e58377c4a924fce91cc804186ba2ef6ddcc15a150c6afc22700c7defc","ssdeep":"3072:FjrNhyvUg18NOeSooooooooooooooooooooF31aiYEGV5qkBFFGeklcxYTBjbdp3:9yvUgm1L0VRsW9","tlshash":"53b3e0f0bac2ee2fe7308f34d11ad556ce077e990a01c9be659aae33fc9b7125055405","first_seen":"2026-01-01T05:38:21.793506Z","last_seen":"2026-03-08T10:47:46.943919Z","times_seen":4,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/css/ecf4cb7364ac32171731cbae849c36c6.css?ver=c36c6","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/css/ecf4cb7364ac32171731cbae849c36c6.css?ver=c36c6 HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"9e82-695bbdcc-1413d7;br\"\r\nlast-modified: Mon, 05 Jan 2026 13:34:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 3452\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40578,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40578), with no line terminators","md5":"38c60ed673b9b9eb28da6ba7793f64d9","sha1":"c71a423c608d1d30addbad78e6a2fa2006043842","sha256":"777e102e9cdf7ddf923e03eb508740130500c61fa54d9405f1e64d917cabb26f","sha512":"a1ea63918a686e94f3c2506adc37c732e5ed7e83e900a2e1f3280924e464e8230973f087dceee111d185d132ab420a7d2352ec0f03cfdf3926a1b1c4f8364a35","ssdeep":"192:jAJEdnnv/nszFCtJz7YvHFb2sIitbWjL5sqowAO6j6KGfeT:jAydnnnSFCtJzUvlb2qbqLT9AOQWeT","tlshash":"0a039d671a6b2025f26ada9930d0593a773b8c03fc651f7f26086d39d3c1ba461f27e1","first_seen":"2025-06-30T11:40:05.326819Z","last_seen":"2026-02-17T02:34:23.867232Z","times_seen":15,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/c1ada699b20e23944bebb8a6ca67387f.js?ver=7387f","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/js/c1ada699b20e23944bebb8a6ca67387f.js?ver=7387f HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"350a-695bbdcc-1413e0;br\"\r\nlast-modified: Mon, 05 Jan 2026 13:34:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4681\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13578,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"47a628aef2f254c32c3b5878700a42ce","sha1":"43814a498670a432b6a73cc80e67bdc738313ea2","sha256":"ea64f589334f647f2254d595466c036000a3d9150ad078a69eba7f845c0c0713","sha512":"2dad1648412fe67306b86320bc4ba90a681086b4e799528ea9783157fdc1fda64dede2e9e7958d0973156ed3d9084034422ed9c4794bedb5c7b8151917540671","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORl:5rprxaefKI0LP19m4q1WW+h4Mjw","tlshash":"5e52c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-08-09T06:09:09Z","last_seen":"2026-04-03T17:02:18.625515Z","times_seen":9696,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/marcus-thorne_avatar_2-40x40.jpg","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/marcus-thorne_avatar_2-40x40.jpg HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"527-694fdcc1-a3bef;;;\"\r\nlast-modified: Sat, 27 Dec 2025 13:18:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1319\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1319,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 40x40, components 3","md5":"e207eea6b07b7daa6e31b72de1b92310","sha1":"926a28cd2d0652274c9ac7deaf2950d49ef6b9f3","sha256":"c7ee38bd26210ab45036818e8157ccc3cce739ede1c1328c2e4d09844218578f","sha512":"089f2a0f065a77ca00c931a17c614ea76bd952d28e6fce224f34c28669e6a5b13ca41c8d6f756f7bdf355d8d418233b57fd24074930465e3338a893476a85266","ssdeep":"","tlshash":"d921b72e874143d0a6038d795a51969c468d2b41bb19bb246a74d5e5c320ccaa4dda4d","first_seen":"2026-01-01T05:38:21.830375Z","last_seen":"2026-01-05T13:55:23.760937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events","fqdn":"gew4-spclient.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"35.186.224.28","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:55:02.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotify.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:96:7A:CE:E4:F6:90:B6:56:41:63:72:FB:64:09:A5:1C:55:D5:78","sha256":"D2:59:C0:71:B2:2E:E8:45:23:E7:B2:56:E4:B0:13:AF:F3:C7:B4:F2:5E:ED:B1:AE:B5:A8:2B:93:58:8D:63:C6"}}},"request":{"raw":"OPTIONS /gabo-receiver-service/public/v3/events HTTP/1.1\r\nHost: gew4-spclient.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://open.spotify.com/\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://open.spotify.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,PATCH,POST,PUT,OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Origin,Content-Type,Spotify-App-Version,App-Platform,X-Spotify-Connection-Id,X-Client-Id,X-Spotify-Quicksilver-Uri,client-token,content-access-token,x-cloud-trace-context\r\naccess-control-max-age: 604800\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:55:02 GMT\r\nserver: envoy\r\nvia: HTTP/2 edgeproxy, 1.1 google\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/dnaaa.webp","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:49.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/dnaaa.webp HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:49 GMT\r\netag: \"38060-694ea59d-a3bfe;;;\"\r\nlast-modified: Fri, 26 Dec 2025 15:11:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 229472\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:49 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":229472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2048x1128, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3230264882a63cf16775ddad4709d019","sha1":"68935edfca5b5080e9183b8399ac55950d413681","sha256":"62ac0d545c2b70ed64ed8575d582eb6fc32b9630973e1b85ef0ba7f56732e807","sha512":"54744fed3f8f29320294c8c6cbdecdb8ff83a7667185f1bca8742a17819d5865b2f0559bc7ed7c1c407f94bf90019c4e854b877790facbe834b977dc812d31a0","ssdeep":"6144:aaKP3/37UDAQv4NCLOaBIhx5eqaaoq8wKZutZH:vgv3PQrSayx5LDoGKsZH","tlshash":"9e2423c42a6fe3c247d0693829361dd74cdeb5ca270f8da8d5bfd7586cb467c82121a8","first_seen":"2026-01-01T05:38:21.822767Z","last_seen":"2026-03-08T10:47:46.970656Z","times_seen":4,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/css/36434d545678ee967bdc5176aff043f0.css?ver=043f0","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/css/36434d545678ee967bdc5176aff043f0.css?ver=043f0 HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"18c6c-695bbdcc-1413d8;br\"\r\nlast-modified: Mon, 05 Jan 2026 13:34:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 17234\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":101484,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"82d223129bd32ee511cda37e313152a3","sha1":"3631a27886fa284391583bf4134b823379b8285f","sha256":"a42a0fe5b6d982f4ce19d57a4dbf657a0ed3138b4bdddfe3cb3d6fe554d07a4a","sha512":"b12a093487926413fdf6f67525392b2cd43621fc343ceef2ea1c4f750a7203a3a77dea79f758b4676d49cbc5089c74230b97fb7dcba8f4b0139f2e20665e09d0","ssdeep":"3072:V8FuDamwgT4kTsKXUxLkSa0l7U90xahRBzEFzl6VpjUHrK1a+Eyq0vSJD:uFuDamwgT4kTsKXUxwSa0l7U90xahRBW","tlshash":"5fa309937264927e7937d22866cca5487300f991df4336e4fd9980d485cebea3623b8d","first_seen":"2025-11-11T21:36:56.518666Z","last_seen":"2026-03-09T21:28:19.740578Z","times_seen":69,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/b877e802110bf265833a4f276fb78e4d.js?ver=78e4d","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/js/b877e802110bf265833a4f276fb78e4d.js?ver=78e4d HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"22a5-69567504-141b0c;br\"\r\nlast-modified: Thu, 01 Jan 2026 13:22:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2520\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8869,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5078)","md5":"887d49cfb7fc8cc44522db57b248e5d6","sha1":"99fff45dc02e29aa4adabd4f5dec382c275cdead","sha256":"71ba6c0939eadb013300431c1dbf7adba812d721d97776e5965eda0151d7ca19","sha512":"7498c68e06f269bee0b352032ce627c86880a499c29d3cc41012e40b701cefcb3232abe8beb8184042bade41c1ad2dc571cd8bad6bfe3eb809446cfbe7854167","ssdeep":"192:OnE77yW+JzWyEEePJWFjiNcCSssplTK8wkk5v:uE7mW+RWyEQFjnlTK8w9v","tlshash":"340245c9711b21e270fe716960efd513a22ff87fea0644a4b69604701fbddb96202bd1","first_seen":"2025-10-23T09:52:08.957646Z","last_seen":"2026-03-08T10:47:46.980951Z","times_seen":9,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/css/9167db62c4e662271131687a75e928a5.css?ver=928a5","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/css/9167db62c4e662271131687a75e928a5.css?ver=928a5 HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"1d37e-695bbdcc-1413d5;br\"\r\nlast-modified: Mon, 05 Jan 2026 13:34:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 14533\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":119678,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"05e2a4e02dff5907ea8725dd3a1b53da","sha1":"3502d576bf89894b6879c2fa89883276cd881f16","sha256":"b2a5e071f1b6b1df56880cc9eae21ec55d4836df9893174e4df56a6270c764cc","sha512":"0c9df9477db55180331bea59a04fceb7d6c7147b27ec39a535abf77c3d0db201fb71f6ef48033872dfb1cf670ed3f84c9874a394e4e3f492552613a26cfcc42c","ssdeep":"3072:XoeJBCCUQg5MG7x+qehvX02dclkWwbFpPu:BfUQg5MG7x+qehvX02dclkWiF0","tlshash":"1dc3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2025-12-03T02:38:40.866052Z","last_seen":"2026-04-03T16:42:45.568316Z","times_seen":966,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/css/001563f992a2b34c4972ecb3853ace32.css?ver=ace32","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/css/001563f992a2b34c4972ecb3853ace32.css?ver=ace32 HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"18648-695bbdcc-1413d3;br\"\r\nlast-modified: Mon, 05 Jan 2026 13:34:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 10009\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":99912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1166ced9cda4ced9fa868ec10ebf8004","sha1":"8712d069029ac47733ebd85493ce3a4d4753c879","sha256":"c1b34dcb8010ee1036e22b22ad7f6ea3f3490c0d60515f06b563d00c8cea90cc","sha512":"cd87f4174f07665fa48c992ed746a5e2de620ab5ee9b80628633841f20589ec77dac4bfef5bd532289a2e9f35600c8d60f37a4b0019bc5b75bed2cf63a6eed1a","ssdeep":"3072:en5E4DcFBMpsErENlSQS+8G43qW9mSizTnRazempUUnhYxipGEEwMSQdEkTbsK6m:en5E4DcFBMpsErENlSQS+8G43qW9mSiN","tlshash":"30a376e5692b62a4f20e84ed98c7e25bd3bed633cc160a55e782c452dbccdb115093f2","first_seen":"2025-10-01T17:47:17.077894Z","last_seen":"2026-01-14T17:33:41.081497Z","times_seen":10,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wellnesswisewhispers.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 07:02:38 GMT\r\nexpires: Sun, 03 Jan 2027 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 197532\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-03T18:31:24.178556Z","times_seen":203128,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":58,"dns":0,"connect":7,"send":0,"wait":12,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/High-Protein-Recipes-horizontal-463595248.jpg-768x432.jpg","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:51.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/High-Protein-Recipes-horizontal-463595248.jpg-768x432.jpg HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:51 GMT\r\netag: \"145e1-69524038-a3bb4;;;\"\r\nlast-modified: Mon, 29 Dec 2025 08:47:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 83425\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":83425,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 768x432, components 3","md5":"95728354affb5ae8b26ceae40e6396ab","sha1":"b9b28aa10f7c245cfcf1882344201802e3c5e191","sha256":"051395d00810f9c4fac3e517713b8873a8e7fd01d0ff8806271d036d1b2284d6","sha512":"5d80b9f829413cf247513a6bea075c67c8e3b7bb690fed4fce50546c7b5126420f671d250fcbe99dba54377c70a07e59d487784a33ec8dd07698154f37cf3492","ssdeep":"1536:xMPzvUxzvyImMJmfTWsZETaDEaKbDO2zgNdaqqQuPn4GnIAaT8EcHIoPWx:KPzvKDzvQfTDZETaDEaKbNzgrafQuP32","tlshash":"0d83121b4bf2d7de4a04e4e6aef4069fc1ce3c62e0a021a38835ded41db0199713a799","first_seen":"2026-01-01T05:38:21.790477Z","last_seen":"2026-01-05T13:55:23.766823Z","times_seen":2,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"o22381.ingest.us.sentry.io/api/4505164808585216/envelope/?sentry_version=7\u0026sentry_key=4cc707ab12ea4779b417479c0550a5cb\u0026sentry_client=sentry.javascript.nextjs%2F10.32.1","fqdn":"o22381.ingest.us.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.120.195.249","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:52.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/4505164808585216/envelope/?sentry_version=7\u0026sentry_key=4cc707ab12ea4779b417479c0550a5cb\u0026sentry_client=sentry.javascript.nextjs%2F10.32.1 HTTP/1.1\r\nHost: o22381.ingest.us.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://open.spotify.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 461\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":461,"data":"{\"sent_at\":\"2026-01-05T13:54:52.111Z\",\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.32.1\"}}\n{\"type\":\"session\"}\n{\"sid\":\"615333d8927045c8b49748a20edf9f1c\",\"init\":true,\"started\":\"2026-01-05T13:54:52.110Z\",\"timestamp\":\"2026-01-05T13:54:52.110Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"f32fb517a3da7c5ba3c16b2fc284ea2fedadd5d3\",\"environment\":\"production\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 13:54:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-03T18:31:00.632521Z","times_seen":551989,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":103,"dns":13,"connect":25,"send":0,"wait":53,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/css/8bdbebc024e710cfbee3e7db456c8da5.css?ver=c8da5","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/css/8bdbebc024e710cfbee3e7db456c8da5.css?ver=c8da5 HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"e6ac-695bbdcc-1413d6;br\"\r\nlast-modified: Mon, 05 Jan 2026 13:34:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 35108\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59052,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59017)","md5":"83461e2cf5d36fa5aba09e95a89690be","sha1":"cedb81add8b947dd5fabe5da97d7332c6cb2beeb","sha256":"ce1281f79ba4132837eea477c2d21047239629888a9772028112a5fa20716f22","sha512":"197c1795ff0d15eb06d1a420b13252b6cd704738cfda1107ba94bcf92c4b8c57f2dd8b0fc3b7b4e9c8f2e1c24cdf269e6ab69e068aef2ddec4135049d40df3e8","ssdeep":"768:Iey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5sJq:Ix/ZvB/qPWMiquqioMUXQSJYIMW+sJq","tlshash":"1543c2b1e64a40d677b0c843af65b27a5582bd7df8409cdaf40b821c1af3635069dfb8","first_seen":"2025-12-03T10:25:12.830611Z","last_seen":"2026-04-02T22:20:48.496015Z","times_seen":403,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/e1057c67e2d9918f186009e580af6e6e.js?ver=f6e6e","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/js/e1057c67e2d9918f186009e580af6e6e.js?ver=f6e6e HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"54-695bbdcc-1413e1;;;\"\r\nlast-modified: Mon, 05 Jan 2026 13:34:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 84\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"fbbef0dab55a56cff341036c015ab130","sha1":"722e60e41d4bb02fa1ad116989cf2a0a0536528d","sha256":"ce57158e6c7143a3b635b3dba62f5ad5f1b69cc65a5ee0604faa651748b0a59a","sha512":"44c4335066fefa7a84c4059cdf0e61c96249cea609e646718176c722f028f197483b72463bc7c5847fcfa2ad3ad27f437fc7f82b51aa331b62d8d1d4734ecf9f","ssdeep":"","tlshash":"97a0122ca904fa460c930100607a310833133c62d64ac880031730ac4c2c554b0d3042","first_seen":"2025-10-09T01:12:34.442366Z","last_seen":"2026-03-19T01:36:21.947957Z","times_seen":26,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/5bba9555edeed6617337b5f42f68c17f.js?ver=8c17f","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/js/5bba9555edeed6617337b5f42f68c17f.js?ver=8c17f HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"61d9-69567504-141b07;br\"\r\nlast-modified: Thu, 01 Jan 2026 13:22:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7599\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25049,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24891)","md5":"73a6b577594b17d246adf4dbf52eb2db","sha1":"7e4ea270c3f3d71f4d70976afc18cf0db663953c","sha256":"7f5a92f5c821c13aee51236faccf797809dc8fe6ff095437d5cf5c2806d8c92c","sha512":"e47b0abbcbc6693153c59055194e28d3bc3fffb465bea8f4151221b3e1c058743d197212f0eab8ee61d776106adc1183bc8bbd26f9cf70d8b2e47f7f2106e7c2","ssdeep":"768:R9INGd5vuFHd5ZAYznYCVsny+Bdfe/75lr/MGR:R9INGd5vuFHd5ZAYzYCVsny++5qGR","tlshash":"c0b2d98d759570164e9630f5908ba64bb0b619646009f07cb6f8e8d2aef8fcc507bf78","first_seen":"2025-10-23T09:52:08.897575Z","last_seen":"2026-03-08T10:47:46.965539Z","times_seen":9,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/8f3b0c8a7df339b6ae62c329ca261833.js?ver=61833","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/js/8f3b0c8a7df339b6ae62c329ca261833.js?ver=61833 HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"5e06-69567504-141b0a;br\"\r\nlast-modified: Thu, 01 Jan 2026 13:22:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6264\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24070,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (22058)","md5":"fa010561ecf35b9d89d699c31dc554e0","sha1":"c51827292714fb4a35472ecfacede69f8e0eb4b8","sha256":"76808539f3da44f7362f18f535f9702503d125bda2601550be93d34126dbb372","sha512":"4e0c0a2c1b2877055b2b2a2427a3bcdca80f46f7b51be9c6cf533c4b1e940e66acbdd548ad8b5dfef72e44ab5d633fed7262660b13aeca4f8e6d177123afd12e","ssdeep":"384:Hjkw9RUneS8zINQQQYZkvzQ8CTYwGuJ5R6HBX5yODynsQoqoqQ5pN5M41w256idZ:HNjjQQYZkvnC5uqmrjyMVz","tlshash":"dfb2c589a12561a162fe12e71cebe042933fd97fed014044a2e54ce65efced12217fb6","first_seen":"2025-10-23T09:52:08.981268Z","last_seen":"2026-03-08T10:47:46.993934Z","times_seen":9,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/3632.4b9b0095313d3587.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:52.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/3632.4b9b0095313d3587.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Dec 2025 12:12:15 GMT\r\netag: \"91422dd2426033e6889325fcffd2330e\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767096024\r\nx-amz-checksum-crc32c: H+q0gg==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:52 GMT\r\ndate: Mon, 05 Jan 2026 13:54:52 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":363626,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"91422dd2426033e6889325fcffd2330e","sha1":"a68ce34104a0fda2fd6aee64c02199a4891adf26","sha256":"801ca8a7060af958aa2c03088117315a84e5a5ddf6f5b5ecc929266c240d5998","sha512":"a55ecbb8a5453b82d28e461f8fc2c7988d04794f65381951b0aecb450fff00f8588266415364f0f2170e87cde86fb49be032fa3cf8ebae6209ccc61d42e1cb51","ssdeep":"3072:qI2o5LDra2RHwRsXvmVmPnXAEso9D1zxxNaKpqiMXXXtzLZmyagJePu+6FJNj9W0:5hZsm/9ttNa4NMZZmyagJePAKVn/VMSY","tlshash":"2f742aa23796e427c786d156b0794503b23d564a240d422cf629fddf3b8e641f3babb0","first_seen":"2025-12-30T20:21:42.227479Z","last_seen":"2026-01-05T13:55:23.771817Z","times_seen":50,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wellnesswisewhispers.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 21:59:25 GMT\r\nexpires: Thu, 31 Dec 2026 21:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 402926\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-03T18:31:24.124299Z","times_seen":294849,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":97,"dns":1,"connect":8,"send":0,"wait":8,"receive":1,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/vaccine-syringe-heart-doctor-3765246212.webp-768x432.webp","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:51.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/vaccine-syringe-heart-doctor-3765246212.webp-768x432.webp HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:51 GMT\r\netag: \"444c-69500fda-a3c01;;;\"\r\nlast-modified: Sat, 27 Dec 2025 16:56:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17484\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17484,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x432, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e6a85b464514f80267728490d3e8c5ff","sha1":"02ed323f575a0424e98b8e431c6093a75623adb0","sha256":"b3323cea7683739db56d100bf91cf0e2be39ba7ed9ac999a1618a741e87c8e6e","sha512":"bf6f3cb5648cd713f198e4ab97fc9cea5854e87a4fdf49b8089c49964640d85f1835a3b6e7a26358e76be2b785e139e17e53737259b1aa91f08cacc698033d9d","ssdeep":"384:hfn5AIHz9KJRq1JHhU84q/KQPqVSWnrJ2PjvcE4pY:hhZhKJRgDU84wtPqVRnrJ2PrcEuY","tlshash":"6472d0c5f417e977b31655f7e4eba42225a8e7dac6233891a3478dcdd8bc213406b10b","first_seen":"2026-01-01T05:38:21.815354Z","last_seen":"2026-01-05T13:55:23.77297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/elena-rossi_avatar_2-40x40.jpg","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/elena-rossi_avatar_2-40x40.jpg HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"544-694f2a5d-a3e1a;;;\"\r\nlast-modified: Sat, 27 Dec 2025 00:37:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1348\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 40x40, components 3","md5":"b5f7c3b80a34664968c8fcf7aa5508db","sha1":"a0355c5e69cfa9bbff6ab812b267696cd171a9fd","sha256":"9858b53a79714026a820c13729f632ba0fc27a4c2ffe913c508f89095a643074","sha512":"984d94fce847b58e4edcd7cc590e6b4239a7c6e7e15eea64a4055e34c01e0e6158dba8a9800079568545811ed6300c20d0973e0d3062f2d14d6ad21d1ecb43a5","ssdeep":"","tlshash":"0921c52e7b9242d0eb474eb98aa611bec1cb2583ba14b1013731c2f396108ccf4649ae","first_seen":"2026-01-01T05:38:21.811573Z","last_seen":"2026-03-08T10:47:46.957456Z","times_seen":4,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-includes/js/jquery/jquery.min.js","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"15601-6942ce6b-83786;br\"\r\nlast-modified: Wed, 17 Dec 2025 15:38:19 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29597\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-03T18:31:20.360105Z","times_seen":683620,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/2a6fad7b362d2c2655906853f4302fb2.js?ver=02fb2","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/js/2a6fad7b362d2c2655906853f4302fb2.js?ver=02fb2 HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"7362-69567504-141b08;br\"\r\nlast-modified: Thu, 01 Jan 2026 13:22:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 10392\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29538,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26928)","md5":"0bc5730b5e4b88d15248667f074d33b8","sha1":"63692922655a7082f593147b739715a9be0ded18","sha256":"aa95f47373c4bbd3c261adbcab308fe22452faf01f1d7131186f667fa9de0d1e","sha512":"5b374123ee605dfaafca13e2bc1518b30ba3e81c631ce904faa51c9efd020b6e2703e8b50f4eb580ab0483632d34f8160e4386f5ff08ea0d51bae950f2178ce8","ssdeep":"768:SIqD7GzOml+D45YMJR3/WVtCNIsxzRJjvT4Nptf:OfI/WLkIazRJQNf","tlshash":"58d209a973511636a89ae0a1587f16476ebf30155684cc8cb87ecdcc0fececaa1b5734","first_seen":"2024-09-19T22:58:52.735619Z","last_seen":"2026-03-27T09:42:39.889946Z","times_seen":11,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/main-0743b49c77669cd1.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/main-0743b49c77669cd1.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Dec 2025 14:57:51 GMT\r\netag: \"7246b74633e990e2f41ec9efefb8948a\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767105896\r\nx-amz-checksum-crc32c: ArbjwQ==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncontent-length: 39626\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":135034,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"7246b74633e990e2f41ec9efefb8948a","sha1":"a23cea4cdd1690c94ae33e7597787d031bfe06fa","sha256":"09971a14520e47f8b01c262a0b66e8ed40de5a25852b3a14470a7e4816d1ca48","sha512":"64019f6a700f33239467f1a7acab25ebdc3aa7f00df5b4f24317804cb89320861a2ce197ae0ac75f8dbff5636d36fd23d43e762fa48d599e0d62ab484c096644","ssdeep":"1536:yGIRtwInBIfDbwO3/cKOTPHyZpPdBSuHwpFLZeiUzJ4BVfwBH:y7BIfDUO3/8HyZNdBALZeiUeb4Z","tlshash":"5ed31ab672d1fda203c741d8843b0006f3695cba106e6095b3e6dcd6b894d9ea0f6f76","first_seen":"2025-12-30T20:21:42.214913Z","last_seen":"2026-01-05T13:55:23.776923Z","times_seen":50,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":234,"dns":196,"connect":5,"send":0,"wait":9,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apresolve.spotify.com/?type=dealer-g2\u0026type=spclient","fqdn":"apresolve.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"35.186.224.24","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:52.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotify.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:96:7A:CE:E4:F6:90:B6:56:41:63:72:FB:64:09:A5:1C:55:D5:78","sha256":"D2:59:C0:71:B2:2E:E8:45:23:E7:B2:56:E4:B0:13:AF:F3:C7:B4:F2:5E:ED:B1:AE:B5:A8:2B:93:58:8D:63:C6"}}},"request":{"raw":"GET /?type=dealer-g2\u0026type=spclient HTTP/1.1\r\nHost: apresolve.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://open.spotify.com/\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-length: 116\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ndate: Mon, 05 Jan 2026 13:54:52 GMT\r\nserver: envoy\r\nvia: HTTP/2 edgeproxy, 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":288,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6288e8b4a47dc36e54f412cb6344d7fd","sha1":"2f0adfdd943e5316411fa027542dba85fe6fad3e","sha256":"342543070d30aa6043efa8967aed90e239dc4ee9018c58825364d34495d9178d","sha512":"8f884ddf4ac25a87d5b999a73351efb69b28079b4e64976076f9079b2c2cf3a298aac8bcd03517a07b63f8d1307b7e2398ae2a7288760a066fedc682428bae75","ssdeep":"","tlshash":"5dd026c342b98df0a6cd0210e639ad63b4fb8118e0bfbd920356811d178c0d6c9542a0","first_seen":"2025-01-28T06:01:36.700127Z","last_seen":"2026-04-03T16:15:28.804887Z","times_seen":1278,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":84,"dns":14,"connect":20,"send":0,"wait":42,"receive":2,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/icons.svg","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:49.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/icons.svg HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:49 GMT\r\netag: \"28eae-694e651d-a3c5a;br\"\r\nlast-modified: Fri, 26 Dec 2025 10:36:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 59869\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:49 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":167598,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e107408b5e9e2358caca704ac80af80","sha1":"e972cfe7024fcedb4967778bc9baf5c238a8706f","sha256":"d2fdac954a9a8433ac04ac4859634a7cc51baeee196a28d85f165403636cf3f2","sha512":"17f9714e64f47cebfe7cc22981f4ab8262c3c6905f19d182f495ab7e0d13243d4a6509c87a1537f8c10c87f2ce19f6bc87d227894f50c150cd15d0bb13875228","ssdeep":"1536:a8hNUYielENh5p52IxC8UVFm/DoFILShS5gqzaXc506aT7xjIl51eaSvKOFhS/Z/:VH4NRss24qwWgyT6bHms","tlshash":"3cf374ed2ff643d4e8ca8b065f1ee4663faa14e677994580740e27d1bb07c88d986f40","first_seen":"2026-01-01T05:38:21.834426Z","last_seen":"2026-03-08T10:47:46.925767Z","times_seen":4,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/css/d76c1e843117f5f0.css","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/css/d76c1e843117f5f0.css HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Nov 2025 09:21:01 GMT\r\netag: \"6920ddd93810521ba1fa2985657b2845\"\r\nx-amz-meta-goog-reserved-file-mtime: 1763025169\r\nx-amz-checksum-crc32c: 6W0Beg==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncontent-length: 2864\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17777,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17777), with no line terminators","md5":"6920ddd93810521ba1fa2985657b2845","sha1":"733c4b82d92b9db82c5f1e7d3e2d36f7f74024bf","sha256":"f50d14d38e859d986fc589f0bc166cd499adcb315a0518154c356f9d053c2e35","sha512":"7415e783afe493e2d277019952129a4c1874a3e48120775d9730282273dc329ca1dd8824f7104b8e794408acf07a6b73635257de023a81ce1a458ac9ac9efa8e","ssdeep":"192:g2rb7eYVDbHc4toZ7dOo8pIYanaC46Svr+0hqM2XNYrkaKLSxVb:glCDbNtOdrIgy6JMoGka5","tlshash":"da82139305a26232f5ff442a55845b24663c6c3789b81bf9de816e2d83c33fd36176e4","first_seen":"2025-11-13T10:49:29.737162Z","last_seen":"2026-03-23T08:30:50.30137Z","times_seen":403,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":240,"dns":203,"connect":5,"send":0,"wait":4,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/2783-94d8ae9a1adef60c.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/2783-94d8ae9a1adef60c.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Dec 2025 11:01:15 GMT\r\netag: \"9741f4876d0c80e1066993e459df8366\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767091862\r\nx-amz-checksum-crc32c: cIPjFw==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":390958,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9741f4876d0c80e1066993e459df8366","sha1":"1dacab026296c8e76731613c428a3ea338539b76","sha256":"79e855c2598e4d6c4da6249dae25c34e119280aea87c961c4e05912365a21d15","sha512":"78fc5697ca11cf4f3d06d37b758693f1fbb40e0a8072a7a8b8d91c2afa5879ab6b3c44005fbcee4fa3b1f0f7df92e6078173a9874d21ce611f6b4a3d9011eb00","ssdeep":"3072:LdPwVgF+ppYQO8emN3NpnQ2oY8ZGk13vB8hBW7k3YiRKPS5lgjQEf2gflTz7Np5X:yykiQOdfGZBAkd1+jxN95bL5/Ma8HXQ","tlshash":"788439c97292f071539381e9503f140bf33e6969684c8428f7a5dce66cba88e8277f75","first_seen":"2025-12-30T20:21:42.210105Z","last_seen":"2026-01-05T13:55:23.779051Z","times_seen":50,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image-cdn-ak.spotifycdn.com/image/ab67706c0000da847658c4308ba2d076c13505a2","fqdn":"image-cdn-ak.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:52.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /image/ab67706c0000da847658c4308ba2d076c13505a2 HTTP/1.1\r\nHost: image-cdn-ak.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed-cdn.spotifycdn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 10 Jun 2025 21:19:09 GMT\r\netag: \"890dbb009b92a7593697e30f5d7283b6\"\r\nx-amz-checksum-crc32c: UYkfmw==\r\naccept-ranges: bytes\r\ncontent-length: 19110\r\nexpires: Mon, 05 Jan 2026 13:54:52 GMT\r\ndate: Mon, 05 Jan 2026 13:54:52 GMT\r\ncache-control: max-age=15780000\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19110,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3","md5":"890dbb009b92a7593697e30f5d7283b6","sha1":"3cd2f11005fdde7df98772b572fd999c939f5814","sha256":"899ad218ba7a5a66ab927f4f1889b76acfe9ee93a0e5546c968ad1b4252f0518","sha512":"c9ff23c91f47c1d645097cd0d4784fa4973d2e015722b1c473d0554ccd2d7f74c382f93297ea59dec179dc53ff7cdcfc5fc8349ae7c6fe427420063e8ff12a72","ssdeep":"384:IXCX3AEJ2+l9rYVxwiO2hz2IQmIJEStSdc9FeYbGX:IXCX39j29XStSS+d","tlshash":"4a82cf852e8863ec32b6da67cc01de530be0836d615dbf7d50c47af7a9edaa50710047","first_seen":"2026-01-01T05:38:21.768152Z","last_seen":"2026-03-08T10:47:46.973454Z","times_seen":4,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/spotify_player_o.79c145df8364624f.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:52.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/spotify_player_o.79c145df8364624f.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Dec 2025 12:12:15 GMT\r\netag: \"71a03d5b38d87ed665a6a7a39de08c77\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767096024\r\nx-amz-checksum-crc32c: ChLC8g==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:52 GMT\r\ndate: Mon, 05 Jan 2026 13:54:52 GMT\r\ncontent-length: 4352\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11773,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11773), with no line terminators","md5":"71a03d5b38d87ed665a6a7a39de08c77","sha1":"b89f0be9230600052731f76ef2c0e6bcf3379414","sha256":"4446be68760fdbe8ce258649a71c7e78f039c04af4dca45bc3577a9ce01380f4","sha512":"4fbd163176c086dadd16f741887e01fb2d40fcc81cee12ae8eb8d296bf37e800a3cae8301bbbc72e1232d73de470577d147d8e4d7642b5b71a7828ff677fcb6d","ssdeep":"192:dK5tHlb+JPRiJkSd9utWbVos4siPKWC5knZw726M3x1n:utx+RttWbVos4shWek7dD","tlshash":"81321af516696692da77a0a4d01f0606333c9f2b3a1dc335f767ae0e10dc50a1ef9e94","first_seen":"2025-12-30T20:21:42.217521Z","last_seen":"2026-01-05T13:55:23.781098Z","times_seen":50,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/css/c8d43d2eb1cecb786887b39cf6e8931e.css?ver=8a7ce","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:49.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/css/c8d43d2eb1cecb786887b39cf6e8931e.css?ver=8a7ce HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:49 GMT\r\netag: \"8432e-695394a0-1413b4;br\"\r\nlast-modified: Tue, 30 Dec 2025 09:00:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 94196\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:49 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":541486,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c8d43d2eb1cecb786887b39cf6e8931e","sha1":"d4d408e7cde9a1f6f097307f55a3aecf168993f5","sha256":"fb5b689fe95fe44f32c921486c85ff28d252fe20ae77109508b67b91c9384244","sha512":"2fec96ccf92591c68f3345c661df1021d76699cc1ec51ba5439438f532b267966cd475abc0f080c3157ae2288fdb52a6ec15c679373043f0c8548487fea82ade","ssdeep":"12288:uxzfUQg5MG7x+qehvX02dclkWi4cQKLmwgT4kTsKXUs:QUQg5MG7x+qehvX02dclkWi4oA","tlshash":"69b4ea91267a50f4736fc22d6dc9e259b31af813cd411be6f096c060d3cdab509e27ea","first_seen":"2026-01-01T05:38:21.820836Z","last_seen":"2026-01-05T13:55:23.781644Z","times_seen":2,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/elena-rossi_avatar_2-80x80.jpg","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/elena-rossi_avatar_2-80x80.jpg HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"a16-694f295a-a3ae9;;;\"\r\nlast-modified: Sat, 27 Dec 2025 00:33:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2582\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2582,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 80x80, components 3","md5":"7e2944934408099a2f7d38fd68e4254d","sha1":"71ffe968918a88c20264c0e806dfa597d0956470","sha256":"5bca10935302b3406fbefcf955051cadb9aa73159cd3c55e3e0d4a3163d33784","sha512":"16029dadec86df915593fdb6619a07797b25a093f26077959379545b6349b0347999f7ee35e1a1c284eada9ad6a6535d849bc7529d31d6308d2515145e49c5c8","ssdeep":"","tlshash":"bd515c3686020fd2d96e8dba806349d4891f966cfdb452483735d9e0c6b05d4448c6cd","first_seen":"2026-01-01T05:38:21.839446Z","last_seen":"2026-03-08T10:47:46.955245Z","times_seen":4,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/framework-0b5b4fa2b4eb5852.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/framework-0b5b4fa2b4eb5852.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 29 Dec 2025 10:59:26 GMT\r\netag: \"1e8acc5e588b498c82300a3a6e3114d0\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767005352\r\nx-amz-checksum-crc32c: 5OOI4A==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":190172,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1e8acc5e588b498c82300a3a6e3114d0","sha1":"bfba9796f719853dd661a13752ac79ba7cb9c175","sha256":"d5808bb50fa6049acdeba2c0ab5ac2b742ac9590345f773f287ab2b55bfb5e4c","sha512":"438f65ee7694a7b951f8d4e01f482580320e191dc5c4df4a0a44ef10c16d2625ec1781ba6dfa7f2f01aff53f5e1081539682b9f640d7614e83450c3145bb7c30","ssdeep":"1536:VWWoicw71odjmYpt//D8nw78a4EkP3VvBQz8P4+u2T0QCz4pXYlaRoH59YUSUh3c:6ndjHEa4N3Qz8P4+r0QCyTM9Y0iPN","tlshash":"49040ae83955f2526eb312b7009f2803737c262b280d4d60a251fd9eb57845eb17bf9e","first_seen":"2025-12-29T12:11:09.447009Z","last_seen":"2026-01-05T13:55:23.783551Z","times_seen":53,"resource_available":true,"data":null}},"time_used":492,"timings":{"blocked":234,"dns":197,"connect":5,"send":0,"wait":13,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/3744-4aca194bbf233695.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/3744-4aca194bbf233695.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 29 Dec 2025 10:59:26 GMT\r\netag: \"8ad610b63c6bf76fc728cb647cd21a93\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767005352\r\nx-amz-checksum-crc32c: CXLR1A==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncontent-length: 6763\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21665,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21665), with no line terminators","md5":"8ad610b63c6bf76fc728cb647cd21a93","sha1":"e77301179a5f1608ace61e846d9198c725eb4636","sha256":"e86d1f7656f745787183c06cfefc3a74d87045d43936bcfa18f55d0fbb08947b","sha512":"f03e972051863fd0843d78e8a540b1473efeafa55f6306598219552aadecd47f8cbb8a12bedfcf50c185a87b1c39ff4ede373a3ac1f897e86c18b69a2141bcdf","ssdeep":"384:s/BUnNnvFAZX6IVk5ClcngGndTAYesCxfjPCYacCQfql/3l6A8:s/BUnNnvFAZK4e9ndTAYwFCQfN","tlshash":"84a219ea61e495b8f25b848cc56b4814771f3528e26c4ef09dafad3852928fcf307764","first_seen":"2025-12-29T12:11:09.429194Z","last_seen":"2026-01-05T13:55:23.784101Z","times_seen":33,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events","fqdn":"gew4-spclient.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"35.186.224.28","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:55:02.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotify.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:96:7A:CE:E4:F6:90:B6:56:41:63:72:FB:64:09:A5:1C:55:D5:78","sha256":"D2:59:C0:71:B2:2E:E8:45:23:E7:B2:56:E4:B0:13:AF:F3:C7:B4:F2:5E:ED:B1:AE:B5:A8:2B:93:58:8D:63:C6"}}},"request":{"raw":"POST /gabo-receiver-service/public/v3/events HTTP/1.1\r\nHost: gew4-spclient.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://open.spotify.com/\r\ncontent-type: application/json\r\nContent-Length: 932\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":932,"data":"{\"suppress_persist\":false,\"events\":[{\"sequence_id\":\"LTIxNDk3Mzk3Mw==\",\"sequence_number\":1,\"event_name\":\"EventSenderStats2NonAuth\",\"fragments\":{\"context_sdk\":{\"version_name\":\"5.0.2-LS\",\"type\":\"javascript\"},\"context_time\":{\"timestamp\":1767621302324},\"context_client_id\":{\"value\":\"q5rQ2WpiSAWn1R6IaN8flw==\"},\"context_application\":{},\"context_user_agent\":{\"value\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"},\"context_correlation_id\":{\"value\":\"b5bd800bdb2e3ff0a14a950f90d0f054\"},\"message\":{\"sequence_ids\":[\"LTIxNDk3Mzk3Mw==\"],\"event_names\":[\"EmbedPlayerActionNonAuth\"],\"loss_stats_num_entries_per_sequence_id\":[1],\"loss_stats_event_name_index\":[0],\"loss_stats_storage_sizes\":[1],\"loss_stats_sequence_number_mins\":[1],\"loss_stats_sequence_number_nexts\":[2],\"drop_list_num_entries_per_sequence_id\":[0],\"drop_list_event_name_index\":[],\"drop_list_counts_unreported\":[],\"drop_list_counts_total\":[]}}}]}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncache-control: no-cache\r\ncontent-length: 13\r\naccess-control-allow-origin: https://open.spotify.com\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\naccess-control-allow-credentials: true\r\ndate: Mon, 05 Jan 2026 13:55:02 GMT\r\nserver: envoy\r\nvia: HTTP/2 edgeproxy, 1.1 google\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b607f4913eec1d8a316cac593bd4a8e8","sha1":"daa906a2c39d6cd6ded7799f6861d1a487901bbb","sha256":"debf84af8d66827e1cbc6791aa686504e3116d8cb20f4697fef23108333061f8","sha512":"70258f0bb3c6bc339a954528515deb8a2f5f0d547592c5495efbe0b4fe55c8d267f29ac3b3dfcc7929555c3b8211bbf03f3cdf24e76334500e81d4cc7f1b231d","ssdeep":"","tlshash":"346000000cc000030c00000cc000000000c00000003000300c0300cc03000000cc3c00","first_seen":"2023-04-06T07:35:35Z","last_seen":"2026-04-03T18:03:45.396029Z","times_seen":46010,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/image-5-e1766747448964.jpg","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/image-5-e1766747448964.jpg HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"d667-694e6d38-a3b2e;;;\"\r\nlast-modified: Fri, 26 Dec 2025 11:10:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54887\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54887,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 876x1024, components 3","md5":"770ec71c091bcd60e5a8a6efb78ba00d","sha1":"29f0344bc77ce4c6c962e3f15c43eccb418be35d","sha256":"7da71f05acf27a14f42fa0eb060deeaaf0c9a91cfd8739fb8ea18ef5def9467e","sha512":"c9c5fec1359cc1d2cf4feea25b1a384ac0b0c6ccdab30cbaf11721f58620a41f1f6f643667837fdc4aead0ba41d7b1a001e8ecbdc5fe306402f042fca77f1c9a","ssdeep":"768:OYOeVewdPcMGbwr9aYA5GEGD05I2BxsWFTP+jWQRFdborGOqH2wVzaV6dGBRyLWL:OZMTdPcxbwxaYYKD050W8KsthOata3","tlshash":"3d33f127bf16f9c2ecb8d7f4fe5a156e40aa7368b4a931c01413ccdba4154e999092fc","first_seen":"2026-01-01T05:38:21.846973Z","last_seen":"2026-03-08T10:47:46.919284Z","times_seen":4,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/904856494996aee771d4829f5b11c45b.js?ver=1c45b","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/js/904856494996aee771d4829f5b11c45b.js?ver=1c45b HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"12daf-69567504-141b06;br\"\r\nlast-modified: Thu, 01 Jan 2026 13:22:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 23575\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77231,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65312)","md5":"f296866f139ffbd8ec32c90d8ab97528","sha1":"15bb40968916b9c79ef6a21f87148190562cfdf5","sha256":"4c33e35b6d6d04243d60b734f0fdd59e46854e2538592ff3adcafafff4ab48e0","sha512":"1f43b57d6fa94e77f6cdad8419c1f8667ebff9abdcd05df4bf249c91be6ff46d723a8f657e8c739aaa9ab51115252421ca9608b61adff247f55bc115044ebb56","ssdeep":"1536:8PBEi4UCSDXKYqxND3pKQDtZjj3yOdbYfERjj+:OBEi4UHDaYUND3pKwN3yOdbYf++","tlshash":"20732ad43952b1a257e3b0f441fb4406f17aaa6974da8080f55af0d0783deda03b7e7a","first_seen":"2025-10-23T09:52:08.930118Z","last_seen":"2026-03-27T09:42:39.830595Z","times_seen":10,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/dnaaa.webp","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/dnaaa.webp HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"38060-694ea59d-a3bfe;;;\"\r\nlast-modified: Fri, 26 Dec 2025 15:11:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 229472\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":229472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2048x1128, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3230264882a63cf16775ddad4709d019","sha1":"68935edfca5b5080e9183b8399ac55950d413681","sha256":"62ac0d545c2b70ed64ed8575d582eb6fc32b9630973e1b85ef0ba7f56732e807","sha512":"54744fed3f8f29320294c8c6cbdecdb8ff83a7667185f1bca8742a17819d5865b2f0559bc7ed7c1c407f94bf90019c4e854b877790facbe834b977dc812d31a0","ssdeep":"6144:aaKP3/37UDAQv4NCLOaBIhx5eqaaoq8wKZutZH:vgv3PQrSayx5LDoGKsZH","tlshash":"9e2423c42a6fe3c247d0693829361dd74cdeb5ca270f8da8d5bfd7586cb467c82121a8","first_seen":"2026-01-01T05:38:21.822767Z","last_seen":"2026-03-08T10:47:46.970656Z","times_seen":4,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":454,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/6-Walking-Resolutions-to-Make-Now-3903164816.jpg-768x482.jpg","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:51.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/6-Walking-Resolutions-to-Make-Now-3903164816.jpg-768x482.jpg HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:51 GMT\r\netag: \"c6f8-694f2a3e-a3c6c;;;\"\r\nlast-modified: Sat, 27 Dec 2025 00:37:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50936\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50936,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 768x482, components 3","md5":"d44fa8907abe3be6e65cc2c02537ffb7","sha1":"cc948bfa93945caac71c467807894afc7faee448","sha256":"a3046994bd6d22d56c4fb58ef3084ebc003ab9eaea609b98446881c5b4cda95a","sha512":"3164a385b8cd219df0e6d47db5103748e4b6adf5d3de56d1e52910b5878f838ceb6fdd76f56bea1e6cddef0ae0e9784677c4fb6a65b29d1181117fdfaf8053b2","ssdeep":"1536:HQivqg+JgSkzTCf8t6nieZ2Wxs1EQUQaqPhKkN474Ti:Ut1f8t6ni31EfQa6rN4UTi","tlshash":"d333e1174c4ccbc641698ae13c031dee6f945b4c98c22dafa2ebde4e79607b194be15c","first_seen":"2026-01-01T05:38:21.8027Z","last_seen":"2026-01-05T13:55:23.786681Z","times_seen":2,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events","fqdn":"gew4-spclient.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"35.186.224.28","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:55:02.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotify.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:96:7A:CE:E4:F6:90:B6:56:41:63:72:FB:64:09:A5:1C:55:D5:78","sha256":"D2:59:C0:71:B2:2E:E8:45:23:E7:B2:56:E4:B0:13:AF:F3:C7:B4:F2:5E:ED:B1:AE:B5:A8:2B:93:58:8D:63:C6"}}},"request":{"raw":"POST /gabo-receiver-service/public/v3/events HTTP/1.1\r\nHost: gew4-spclient.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://open.spotify.com/\r\ncontent-type: application/json\r\nContent-Length: 1106\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1106,"data":"{\"suppress_persist\":false,\"events\":[{\"sequence_id\":\"LTIxNDk3Mzk3Mw==\",\"sequence_number\":1,\"event_name\":\"EmbedPlayerActionNonAuth\",\"fragments\":{\"context_sdk\":{\"version_name\":\"5.0.2-LS\",\"type\":\"javascript\"},\"context_time\":{\"timestamp\":1767621292472},\"context_client_id\":{\"value\":\"q5rQ2WpiSAWn1R6IaN8flw==\"},\"context_application\":{},\"context_user_agent\":{\"value\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"},\"context_correlation_id\":{\"value\":\"b5bd800bdb2e3ff0a14a950f90d0f054\"},\"message\":{\"device_type\":\"desktop\",\"view_uri\":\"spotify:playlist:5edo08GMfelhtbRx8rIAOH\",\"entity_uri\":\"spotify:playlist:5edo08GMfelhtbRx8rIAOH\",\"entity_type\":\"playlist-v2\",\"embed_is_video\":false,\"page_url\":\"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator\",\"referrer\":\"wellnesswisewhispers.com\",\"viewport_width\":399,\"viewport_height\":352,\"is_authenticated\":false,\"browser_name\":\"Firefox\",\"browser_version\":\"134.0\",\"os_name\":\"Windows\",\"os_version\":\"10\",\"is_preview\":true,\"action_type\":\"pageview\",\"action_intent\":null,\"action_item_id\":null,\"item_uri\":null}}}]}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncache-control: no-cache\r\ncontent-length: 13\r\naccess-control-allow-origin: https://open.spotify.com\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\naccess-control-allow-credentials: true\r\ndate: Mon, 05 Jan 2026 13:55:02 GMT\r\nserver: envoy\r\nvia: HTTP/2 edgeproxy, 1.1 google\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b607f4913eec1d8a316cac593bd4a8e8","sha1":"daa906a2c39d6cd6ded7799f6861d1a487901bbb","sha256":"debf84af8d66827e1cbc6791aa686504e3116d8cb20f4697fef23108333061f8","sha512":"70258f0bb3c6bc339a954528515deb8a2f5f0d547592c5495efbe0b4fe55c8d267f29ac3b3dfcc7929555c3b8211bbf03f3cdf24e76334500e81d4cc7f1b231d","ssdeep":"","tlshash":"346000000cc000030c00000cc000000000c00000003000300c0300cc03000000cc3c00","first_seen":"2023-04-06T07:35:35Z","last_seen":"2026-04-03T18:03:45.396029Z","times_seen":46010,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/plugins/litespeed-cache/guest.vary.php","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:49.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"POST /wp-content/plugins/litespeed-cache/guest.vary.php HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wellnesswisewhispers.com/\r\nOrigin: https://wellnesswisewhispers.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-robots-tag: noindex\r\nx-litespeed-cache-control: no-cache\r\nset-cookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0; expires=Wed, 07 Jan 2026 13:54:49 GMT; Max-Age=172800; path=/; secure; HttpOnly\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 36\r\ndate: Mon, 05 Jan 2026 13:54:49 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"e2bb2c7e02e214822b4ffffc314ca27e","sha1":"2d193e2847595361f1b0ce151dfd28c2f855c510","sha256":"76fb65f605df2b2d124684c3c4ec3e0c75fdf013b2727af6cdb68b73b5c8a9bb","sha512":"acd30fcff40e16a4a59148b85a496dad9946906d3e1c998d9b6fbfc8f8474a828489e9f129eb20f3c3588b3fc55cb3f146c1c457a2f4d51d2dc115ef88d044f8","ssdeep":"","tlshash":"92600000220c820202200880b080000000800822888a80e08000000080008800002a22","first_seen":"2023-04-05T13:39:14Z","last_seen":"2026-04-03T16:56:48.839502Z","times_seen":9241,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Poppins:wght@700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 13:54:50 GMT\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1201,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"47c7002e2c2f04a1f1f06e4f5d332afa","sha1":"e2634c61581ad7484e25375d0df52d61a53c504c","sha256":"34fabf175bb7e06a1224ce9a317619a4bad4171f4267924008aa2996f4becd87","sha512":"ba2b2dd3ec5ee134bfa223db14aa708450871d200110df940e723e1e3b12888d61a41d63cb9481f4c71c0c7c1797999eaca4ed55720e7f29bfeebaa7a52b8c5d","ssdeep":"","tlshash":"6c219dd1087bd1049b971cc222ce7d37ee0e91547410d5746bfd0c9cada7c25436172d","first_seen":"2025-09-18T05:45:25.389736Z","last_seen":"2026-04-03T16:21:31.84837Z","times_seen":1637,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":149,"dns":0,"connect":8,"send":0,"wait":17,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/57de4abd5f0e6b52ffce9f633203b4c0.js?ver=3b4c0","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/js/57de4abd5f0e6b52ffce9f633203b4c0.js?ver=3b4c0 HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"f5f-69567504-141b0b;br\"\r\nlast-modified: Thu, 01 Jan 2026 13:22:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1572\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3935,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3933)","md5":"c9a6c9aa87f935286a9fd2cade83b900","sha1":"60600109a545ab18d75517ed039bae60e0fa6166","sha256":"a9a4b8c80498438194b4392ed703aa76ce9df8a247c0156e2cfb28847ce54405","sha512":"6e42bc8220a7b5a773719503497c994fffe08a9ab27521b1ce400da679a9ae1b423c36ef92b7e32c7f510b46f07a67f16d69664c667a904ba48bc1e943b22e4e","ssdeep":"","tlshash":"3e8161546a907caa52f144ee388fb908a07ddc552b8ca5e8f6099ca24d34b0070ffddd","first_seen":"2025-10-23T09:52:08.978027Z","last_seen":"2026-03-27T09:42:39.869868Z","times_seen":10,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/plugins/blocksy-companion/static/bundle/sticky.js?ver=2.1.23","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:51.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/plugins/blocksy-companion/static/bundle/sticky.js?ver=2.1.23 HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"2d82-694da7dd-c26d5;br\"\r\nlast-modified: Thu, 25 Dec 2025 21:08:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3100\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11650,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11650), with no line terminators","md5":"b7b646118c067db854774e30eac5d09d","sha1":"90932ce2103b1e1842d508cc3fa5d2722374be11","sha256":"10d64531f77b217200a4353f8d02636c2c56d24bedc10df6e1977838690a058b","sha512":"bb1579ba30fe3a2a741bccfcba4097919f39d86e9fb592dcd4fac6706ed76885fd568afc1ee03ab456252819a390ef463de665b8767519b44b89e3a4fb0681c2","ssdeep":"192:XTGNm5Rtz+/PP+7MqqWz1vJo8ilewz6tpe3MZD+JBD7mMEcc3:XT6m5Rt6HPKeMho8gewWtpe3MSY7","tlshash":"f732e6743391b435936b35ca8a6f5506b5ab328e74db8054b548cc6b3ce540370dbeeb","first_seen":"2025-11-14T16:13:01.530278Z","last_seen":"2026-04-03T16:12:35.980375Z","times_seen":809,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/webpack-69006b829e215c29.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/webpack-69006b829e215c29.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Dec 2025 12:12:15 GMT\r\netag: \"68636f858d2c44df35e3b178ba19efee\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767096024\r\nx-amz-checksum-crc32c: tqPO2A==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncontent-length: 3160\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5864,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5864), with no line terminators","md5":"68636f858d2c44df35e3b178ba19efee","sha1":"1d033d5ec8c37f68f51d3eb380d7214c26c9f5a6","sha256":"f504b751289413dde6c7d536c4c04c38b8e0267c892cf97f360bbf45c45153d9","sha512":"611798a6008e79f708c06cde9202b02255bc76270590b9f3d0d34f7eda719e186d6067ab9d1135476b3bff41cf20bdf9c830f1b7e2a572addc4efa3a4854bad4","ssdeep":"96:kPSjy8jlYqFcHVvJSNaLgrF2vHGhpl/wjDsVIqVJvpSGFGszBbFONVsRD3:IkpeCOSNa+Fvhpl0sJrpksNbQsd3","tlshash":"bdc108a933e8fcba366101c2243e8255f51424372559acf0e396dc7e7868ee24675fb2","first_seen":"2025-12-30T20:21:42.249255Z","last_seen":"2026-01-05T13:55:23.790305Z","times_seen":50,"resource_available":true,"data":null}},"time_used":493,"timings":{"blocked":239,"dns":201,"connect":5,"send":0,"wait":5,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gew4-spclient.spotify.com/gabo-receiver-service/public/v3/events","fqdn":"gew4-spclient.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"35.186.224.28","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:56.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotify.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 08 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:96:7A:CE:E4:F6:90:B6:56:41:63:72:FB:64:09:A5:1C:55:D5:78","sha256":"D2:59:C0:71:B2:2E:E8:45:23:E7:B2:56:E4:B0:13:AF:F3:C7:B4:F2:5E:ED:B1:AE:B5:A8:2B:93:58:8D:63:C6"}}},"request":{"raw":"OPTIONS /gabo-receiver-service/public/v3/events HTTP/1.1\r\nHost: gew4-spclient.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://open.spotify.com/\r\nOrigin: https://open.spotify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://open.spotify.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,PATCH,POST,PUT,OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Origin,Content-Type,Spotify-App-Version,App-Platform,X-Spotify-Connection-Id,X-Client-Id,X-Spotify-Quicksilver-Uri,client-token,content-access-token,x-cloud-trace-context\r\naccess-control-max-age: 604800\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:56 GMT\r\nserver: envoy\r\nvia: HTTP/2 edgeproxy, 1.1 google\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":60,"dns":25,"connect":12,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/uploads/2025/12/marcus-thorne_avatar_2-80x80.jpg","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/marcus-thorne_avatar_2-80x80.jpg HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 13:54:50 GMT\r\netag: \"991-694f2992-a3af8;;;\"\r\nlast-modified: Sat, 27 Dec 2025 00:34:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2449\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2449,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 80x80, components 3","md5":"14386da8c6211f855fae7e214b7b897d","sha1":"2aa8a9883e3417520a5ef4110efe2b0230721e70","sha256":"50d61540d6cc90a9ccbff85b7b36f7d5725ba4aa884ac1c44e5fc016c7c67097","sha512":"0aab711fe6bd448b4d6586f5d010466b97451067099dbbb33a1621ad0959d28630634335640d9eb8f58dcd8f47858265b96c660eb6a4df2138c5473b1f310e74","ssdeep":"","tlshash":"48511baf7e62ce9155394df02b62d258f30d2be1786c22026e72d2a5c260dc0d654d9c","first_seen":"2026-01-01T05:38:21.819214Z","last_seen":"2026-03-08T10:47:46.939228Z","times_seen":4,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wellnesswisewhispers.com/wp-content/litespeed/js/2b0bcaa288fae2d85ae62b66cb26d44b.js?ver=6d44b","fqdn":"wellnesswisewhispers.com","domain":"wellnesswisewhispers.com","tld":"com"},"ip":{"addr":"172.238.210.215","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wellnesswisewhispers.com/","date":"2026-01-05T13:54:50.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnesswisewhispers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 14:38:40 GMT","end":"Tue, 17 Mar 2026 14:38:39 GMT"},"fingerprint":{"sha1":"4B:C7:2D:A4:AD:F8:8D:38:9B:9C:0D:84:27:15:BF:42:22:91:A2:9D","sha256":"DD:C1:57:72:C3:27:05:92:66:85:3E:43:B6:B5:9F:FC:86:99:C7:61:BD:B3:E7:1D:46:C5:A0:51:D6:23:8A:2E"}}},"request":{"raw":"GET /wp-content/litespeed/js/2b0bcaa288fae2d85ae62b66cb26d44b.js?ver=6d44b HTTP/1.1\r\nHost: wellnesswisewhispers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wellnesswisewhispers.com/\r\nCookie: _lscache_vary=c86fd22fa5eea36d8c16903925c087e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"12db8-69567504-141b09;br\"\r\nlast-modified: Thu, 01 Jan 2026 13:22:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 20007\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 13:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77240,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64217), with no line terminators","md5":"141d704f8305f80172ce960e8a970513","sha1":"ec3cc8cf925f1c5754e7d35a1faa1b697232f8bf","sha256":"2b4012c81408b29b34444cc53ebb32e9ab511225de5bdec17ca6966c19b28a99","sha512":"487291e83ae308fc4dd4338844b2992fdfc771f71a893f2982c1ad08126212a4f812338bfc13cd708af09a181710c7231e60034fec83b5156360d6423d0e1cc2","ssdeep":"768:d2oLNdg5pTFtCdlSDYxiJdcCcCymUGBokOl/NNyTeeUBo479yeYX5KnZprIf/nyw:rr2tBqiJdclJkOZ/LYJOHrA6pf2KHHe","tlshash":"6173b848ba537235427f20e6657f000a3136bb7eb00956a8b458cde86ebdc54726bf3d","first_seen":"2024-09-19T22:58:52.689942Z","last_seen":"2026-03-27T09:42:39.817493Z","times_seen":11,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wellnesswisewhispers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed-cdn.spotifycdn.com/_next/static/chunks/pages/_app-fea82ca5b5e5f29e.js","fqdn":"embed-cdn.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://open.spotify.com/embed/playlist/5edo08GMfelhtbRx8rIAOH?utm_source=generator","date":"2026-01-05T13:54:51.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-fea82ca5b5e5f29e.js HTTP/1.1\r\nHost: embed-cdn.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://open.spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Dec 2025 14:57:52 GMT\r\netag: \"54c598acf98635f72a4bfe9add431196\"\r\nx-amz-meta-goog-reserved-file-mtime: 1767105896\r\nx-amz-checksum-crc32c: 6/5ESA==\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 13:54:51 GMT\r\ndate: Mon, 05 Jan 2026 13:54:51 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446694,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54c598acf98635f72a4bfe9add431196","sha1":"c6eddda0d1544debf15f5dccac10568c299fc13a","sha256":"2740839a7160c5aed7904e77c286bcbdf16d3849b2997ef184eeeb8d85bc976b","sha512":"af9ade6e7f3d1fc4e09a491c7b072ffa4249c4b984c8dc97afc42e85d1aa1cb245e8a4b1c4d3cff3150a1ae41d6277470517caadf272840999a73d3a056898de","ssdeep":"6144:HjPxnOdGf+vceggA4svFTyUZPVBZqq/wPPhJtHDsPvd:HjxG1uoUZPV2q/w2d","tlshash":"8f9429ea7392b03253db4165907b0003f3795a65144d046cf269edef39a888ab2f7f79","first_seen":"2025-12-30T20:21:42.229496Z","last_seen":"2026-01-05T13:55:23.792903Z","times_seen":50,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
